https://getoverlay.io.
Flow:
- Desktop opens the system browser to the server sign-in page.
- After success, the browser returns via an
overlay://callback. - Main process validates the handoff and stores session material using OS secure storage / Keychain-backed APIs.