[caryd]

There are a million options for authentication already created and ready for use. Nearly every CMS has this ready for you on install. You could also go with active directory. You could also use the major ones that integrate with Google, fb, etc. Starting from scratch is fine but you'll have to use a ton of development time that could be better spent on your app.

[macklemoreshair]

yes, we were using cognito in this case. but all of the logic even with integrating with one of these auth providers, took us a few weeks to get polished and right.

the list i made about the different pages we had to build to get this to work correctly, it took one of our devs a few weeks to really get the login and account system and integrated with AWS cognito