Meta Horizon OS supports two authentication approaches: OAuth 2.0 for third-party account authentication (covered on this page), and Meta Account Linking for linking user accounts to Quest accounts (see Account Linking). You can use one or both depending on your app’s needs.
OAuth 2.0 authentication
If your application relies on OAuth 2.0 for authentication and authorization, Meta Horizon OS supports any provider that utilizes Private-Use URI Scheme Redirection.
The BROWSABLE category is required for the system to route browser-based OAuth redirects to your app. Replace your.app.scheme with your app’s unique custom URI scheme (for example, com.yourcompany.yourapp).
Device code authentication
If you’re building a streaming or media app, you must offer device code login (as specified in RFC 8628) or another authentication flow optimized for devices without keyboards (such as QR code login or mobile companion app authentication). See Media app requirements for details.