We have authorization built into the app, but are using a simple auth proxy, with oidc for authentication. If you want to authenticate your own app, you can use something like ouath2-proxy with an oidc provider, and set the `AUTH_MODE` configuration in our app.
Happy to walk you through it if you join our slack.