You could try and use an OAuth lib on top of using supertokens to enable that.