Comment by WhatsName

Django allauth, 10 years later still a no-brainer.

For selfhosting Authentik + Traefik forward auth is a unbeatable combo