OptiLogin

The most complete login system on the Unity Asset Store.

OptiLogin gives your Unity 6 game everything it needs to ship a polished, secure

sign-in experience — from the UI all the way down to a runnable ASP.NET Core

reference server — without locking you into a single backend or making you

write a single line of OAuth code.

Perfect for any genre that needs player accounts: mobile RPGs, gacha titles,

multiplayer competitive games, online card games, MMOs, casual & social apps.

Anything that ships with a player profile.

FULLY CUSTOMIZABLE

Six designer-grade themes (DarkSlate, LiquidGlass, NeonCyber, MinimalLight,

MaterialYou, AuraGradient) driven by a single ScriptableObject. Drag a theme

onto the controller to restyle every view — Login, Sign Up, Forgot Password —

at once. Or create your own from scratch via Assets ▸ Create ▸ OptiLogin ▸

Login Theme — every colour, gradient direction, corner radius, border width,

font and social icon is a property. Live editor preview, no Play Mode required.

Built on UI Toolkit, so every visual element is also customisable via UXML/USS

if you want to push it further.

FOUR PLUGGABLE BACKENDS

Add one component to choose:

  • Self-Hosted REST — full ASP.NET Core 8 reference server with PostgreSQL

    schema included

  • Firebase Authentication

  • Unity Gaming Services

  • Mock for prototyping

Backends are interchangeable — the UI never knows which one is wired.

OAUTH 2.0–GRADE SECURITY, BAKED IN

  • RFC 6749 §10.4 refresh-token reuse detection (revokes the lineage on attack)

  • AES-256-CBC + HMAC session storage with device-derived key

  • PBKDF2 600,000 iterations (OWASP 2024 guidance)

  • Per-account brute-force lockout with anti-enumeration response

  • Constant-time login closes the timing side-channel

  • JWT token versioning for instant logout-all

  • HTTPS enforced in release builds

BUILT FOR APP STORE GAMES, NOT WEB FORMS

  • Long-lived sessions that survive app restarts

  • Guest play with one-tap upgrade (preserves user id and progress)

  • Account deletion compliant with App Store Review Guideline §5.1.1(v)

  • Two-step "Delete Account" confirmation UI included

  • "Sign out everywhere" with token-version invalidation

  • Maintenance mode (503 with your custom message)

  • Bundled Apple PrivacyInfo.xcprivacy template — paste in, ship to App Store

EIGHT LANGUAGES OUT OF THE BOX

English, Traditional Chinese, Simplified Chinese, Japanese, Korean, German,

Spanish and French — every UI label, error message and status pre-translated.

Bundled Noto Sans CJK fonts (SIL OFL 1.1). Live locale switching and

per-locale font swapping.

TWO-MINUTE SETUP

The included Setup Wizard (Tools ▸ OptiLogin ▸ Setup) walks you through every

step: create the UI, pick a backend, test the connection live, pick a theme,

add social providers, assign fonts, register scenes in Build Settings, open

Localization Settings. Reuses your previous answers across editor sessions.

DROP-IN SOCIAL PROVIDER MODULES

Add the Google / Apple / Facebook / LINE component, the matching button

appears. Your code provides the OAuth token via a single delegate; the

backend verifies it server-side. No secrets ever in your client build.

PIPELINE & PLATFORM COMPATIBILITY

OptiLogin renders entirely through UI Toolkit — no shaders, materials, or mesh

renderers. Works identically on Built-in, URP and HDRP with zero migration when

switching pipelines. Tested on Windows, macOS, iOS, Android and WebGL.

DOCUMENTATION & SUPPORT

  • README + Server API + Game Integration docs (English / 繁體中文 / 日本語)

  • iOS & Android Platform Guide with a pre-submission checklist

  • OpenAPI 3.0 specification of the REST contract

  • Apple Privacy Manifest template ready to deploy

  • Runnable ASP.NET Core 8 reference server with full source (JWT, PBKDF2,

    EF Core, PostgreSQL schema, rotating refresh tokens, rate limiting)

  • EditMode unit tests (SecureStore, AuthValidator, AuthSession, Theme)

  • Discord community: discord.gg/se7EY2mpDG

  • Email support: hello@optiimind.com

REQUIRED UNITY PACKAGES

  • com.unity.localization (1.4 or newer)

  • com.unity.inputsystem (1.7 or newer)

The bundled Dependency Checker warns you on import if either is missing —

a clear, actionable dialog instead of compile errors.