General scheme
A sign-in starts in your app: it sends the browser to the sign-in page with a standard OpenID Connect redirect. The user confirms in a channel, and the browser returns to your app with a code that your app exchanges for tokens.

Signing in on a computer

The user scans the QR code with their phone camera, sends the ready-made email and confirms the sign-in on the computer.
Signing in on a phone

The user taps "Send confirmation email", sends the ready-made email and taps Yes on the confirmation page.
Claims your app can get
