Not sure how much writing there is on the topic. Just think about how you sign in to mainstream apps today and how your user identity is handled there. Then think about how you sign into nostr apps/clients