It uses lightning URIs scheme (no Lightning node involved). Websites can authenticate users simply by using the link and verifying the signature in the response.

the app you're signing into wouldn't know a wallet signed it. It just knows something signed it and sent back an HTTP request with a signature.