you only add your npub and a noteID of a note you post (which you basically have signed with your nsec with or without knowing this)

nostrnest then detects the note by which it verifies you are the npub "logging in"