yes, just send a signed event…

yes, just send a signed event in an authentication header

if window.nostr is there, you can add a "sign in with nostr" button

https://nosdav.com/spec/#authentication-header