#[aciccarello]RelMeAuth using the https://indieauth.com/ service can be a rel=me link on a website for the user of your site. Then your protected website would need to either use a service like https://indielogin.com/api or implement the oath stuff to check authentication.