Do you need to build your own auth for apps?

Meh. In rails I just drop in the devise and pundit gems. Authentication and authorisation done in about 15 minutes.