202 with phone_url and auth_code. Share phone_url with the
creator (or render the auth_code as a QR). The attempt parks on
awaiting_mobile_session until they approve, then resolves to
completed_success.
GET /v1/connect/login/{attemptId} the same way as
email/password login.
Embeddable sessions
For an in-product flow, create a client session and embed the hosted page in a popup or iframe:embed_url you can open with the
onlyfanskit/browser helper (startOnlyFansAuth()) for a native popup, plus
a phone_url to share directly. See Embedded connect.