If this is your future, you have to put a relay with simple relay auth. It's not worth coding a separate http-based auth with nostr keys.
Discussion
Was planning to just let the apps authenticate and they access db directly.. Bit yes, long run may be better