Hey, you may want to take a look at these server boilerplates:
https://github.com/graphql-boilerplates some of them (the advanced ones) have authentication already built-in. You have to learn how to use it, though. I'm also starting to get these things figured out.