Full stack Middleware/Auth Guidance

I would like to add OAuth to the entire application. Ideally at the edge layer before the frontend client is even served.

Something like this:

Browser => Edge Auth => React app.
Something equivalent to [this AWS example](https://github.com/aws-samples/cloudfront-authorization-at-edge)

The server in this example could then read a secure cookie.

The goal is to have separate, per user stateful sessions and no guest/anonymous access

Any suggestions would be greatly appreciated

No repository files or tests are named. Start by reviewing how the application serves the React client and handles server requests, then compare that flow with the linked AWS edge-authorization example. Done would require an agreed design for edge authentication, secure cookies, per-user sessions, and no guest access.

Written by the indexing model from the issue text.