| CPC G06F 21/36 (2013.01) [G06F 3/011 (2013.01); G06F 3/012 (2013.01); G06F 21/31 (2013.01); G06F 21/33 (2013.01); G06T 19/006 (2013.01); G06F 2203/04804 (2013.01)] | 20 Claims | 

| 
               1. A display system for displaying virtual content in a three-dimensional (3D) spatial environment, the display system comprising: 
            a head-mounted display configured to present the virtual content to an eye of a user of the display system; and 
                circuitry in communication with the head-mounted display, the circuitry configured to: 
                execute an application configured to present application-specific virtual content to the user; 
                receive an authorization request from the application to authorize the user with a service; 
                execute, by the head-mounted display, an authorization service configured to: 
                determine a network address associated with the authorization service; 
                cause the head-mounted display to transition from presenting the application-specific virtual content to presenting a modal authorization window associated with the network address, wherein the modal authorization window is configured to accept user input including authentication credentials, and wherein the transitioning includes: 
                presenting the application-specific virtual content inside a shrinking circle, and 
                  after the circle has shrunk to a predetermined size, expanding the circle to present the modal authorization window within the circle, wherein, while the modal authorization window is presented, the application and access to all other applications in the 3D spatial environment are disabled from receiving any user input; 
                responsive to a successful authorization of the user based at least partly on the authentication credentials, generate a response status code; 
                communicate the response status code to the service; 
                receive, from the service, an access token indicative of the successful authorization; and 
                communicate the access token to the application; and 
                terminate the authorization service. 
               |