Is your feature request related to a problem? Please describe.
Currently it's not possible to implement a custom provider for tailscale due to the requirement of having the web finger endpoint https://tailscale.com/kb/1240/sso-custom-oidc/ at https://${domain}/.well-known/webfinger

Describe the solution you'd like
I'd like for the Webfinger endpoint to be implemented as per rfc7033

Describe alternatives you've considered
None, as the endpoint is needed to configure tailscale

Additional context
None