It really just depends on what you're trying to do I guess. The main auth boundary for my projects is typically the server gateway/api, and that's very straight

It really just depends on what you're trying to do I guess. The main auth boundary for my projects is typically the server gateway/api, and that's very straightforward to set up, whether you want simple auth or role-based or to inspect JWT claims or whatever.