I'm conceptualising how I'm going to roll a web app alongside a mobile app, and I wondered how auth is standardised across the two platforms. I'd like to use 100% OAuth logins (Google, Microsoft, etc) for both the website and mobile app. I'd like the mobile to call protected api routes on the nextjs project, but obviously that requires auth. Any pointers?