Hubs itself is open-source; you should be able to find whatever library it's using if you dig in the relevant repos. > the verification link does not authentic

Hubs itself is open-source; you should be able to find whatever library it's using if you dig in the relevant repos. > the verification link does not authenticate the browser that it opens from your email, but rather the browser that your email address was originally entered in That is much slicker (and necessary in the case of Hubs, where you may not be able to access your email from within a VR environment), but it also carries risk: Naïve implementations would open you up to attack if you accidentally clicked the link on an email sent in response to someone else entering your email address in the app.