Thanks. 

To do if from scratch, but without hosting bunker daemon myself, I should follow this: https://github.com/kind-0/nsecbunkerd/blob/master/OAUTH-LIKE-FLOW.md