IsoMetro user auth service

This service is for verifying product ownership by IsoMetro users across storefronts (itch.io, Steam).

In line with Stop Killing Games,

The Free Edition supports multiplayer sessions, without any Grimesoft infrastructure.

• Anyone can host a server, from the Free Edition game client itself, or via the publicly available dedicated server.

However, in order to make use of our additional convenience features (storing and distributing server listings, and assisting in hole punching so you don't need to set up port forwarding on a server in order to host), we require you to purchase the Gold Edition.

Log in with itch.io OAuth

Click here to log in via itch.io OAuth.

What does this do?

The OAuth process normally takes 2 clicks only (in bold):

• (Well, you probably clicked something to get to this page already, so 3 then?)
• Clicking the link above will bring you to the itch.io website.
• If you're logged in to itch.io itself, then on their webpage we sent you to, you can choose to click to grant authorization for this service to identify you.
• Automatically itch.io will send you to a page back on this site, along with an itch.io-specific token.
• The page on this site itch.io sent you to will upload the token to our infrastructure.
• Our infrastructure will use the token from itch.io as proof you own the itch.io account, so we can determine your user ID.
• Our infrastructure then uses our own itch.io credentials to ask itch.io whether your user ID is an owner of our game.
• If so, our infrastructure generates a cryptographically signed Grimesoft/IsoMetro token and sends it back to your browser.
• The webpage receives the Grimesoft token and now uploads it to a `localhost` URL where IsoMetro is listening for it.
• If the game isn't listening on a local server, perhaps due to antivirus software restrictions, you would at least be able to manually copy-paste the token from the page in browser, into the game.
• IsoMetro can now use the Grimesoft token when it logs into the server browser infrastructure, so you can now use services of that infrastructure (read server listings, publish yourself).
• Because users who have been able to make their way thru the infrastructure by the time they join a third-party server, that means they've proven ownership of their itch.io or Steam account. This step can be combined with other mechanisms to help deter, identify, and respond to abuse behaviors, indirectly improving the player experience overall.
• On the positive side, it also enables features like being able to add friends from games you join, so you can go play other games with them if you want.