He uses next-auth; that takes care of that in ways I didn't understand yet.

But I think using that library is overkill for me (for now). I only want to support LNURL-auth.

Also, I like implementing stuff on my own first (yes, I know about "don't roll your own crypto" haha)