You don't have to expose your private key. You can use an app like Alby or NostrConnect to sign your authentication requests on the nostr network.