If you were feeling extra useful you could probably make a PR to supabase/gotrue to enable custom oauth2 providers, which could then enable a whole class of oauth2 fun. Supabase would just need to add the custom oauth2 option inside the dashboard.