Yeah the auth here is simple intentionally. This is just an example of what's possible, but you could extend the node server to do forward auth or anything else you have in mind