Could easily use nostr-login for login which would allow you to sign in with or without an extension using something like nsec.app. Nsec.app works great. I think people are sleeping on it cause it’s not easy to understand how it works at first.
https://github.com/nostrband/nostr-login