Would be great if tangled supported OAuth for web logins!
The atproto flavor of OAuth is non-trivial to implement, and we (Bluesky) do not have an SDK for golang yet, but i'd be happy to help get one going.
The OAuth flavor also does not yet support specific "scopes", but we are working on that, and it should not be too hard to transition once that is ready.