I will preface this by saying I am a little new to some of this and worry I may be over thinking this problem or re-inventing the wheel in some way.
I am making a game in Unity and want to include user validation/authentication so I can have unique usernames for scoreboards etc. I tried some of the built in methods like Google sign in for example but I want my game to be agnostic and not be limited to requiring the user to have a specific account like Google Play for example.
My idea is to store the user name in a database and link it to a unique hash for that player. This hash will also exist in an encrypted file on the players device. Now I want to be able to verify the user and user hash with the database when logging in, but in order to do that I need to decrypt the hash server side. I verified I can do this in python and have a script for it running in a local Xampp server, now I need to figure out how to make calls to this script and receive a response. So here are my questions:
- Is this overcomplicated or a flawed design
- If not, how do I send and receive data from the python script. In Unity typically use UnityWebRequest which I think is similar to an HTTP request but am unsure how secure this is server side.
- Some information I found pointed to this Python library HTTP server but the top of the documentation warns about security issues
Any advice or information would be greatly appreciated!