IndieAuth is fine (but I’ve yet to see an implementation out in the wild).

Tailscale’s implementation of OIDC is nice: https://tailscale.com/docs/integrations/identity/custom-oidc

But all that only makes sense if you own a domain name.