There are hosting providers working on auth and paywalls using pubkeys, but I would consider this not „on nostr“.

I can certainly see this happening with encrypted posts, where the secret is revealed once a post has been zapped. But there is so much complexity to solve on the client side, that I would expect people to rely on third parties again, which means we could have gone with hosting providers in the first place…