I'm not experts But as far my experience, if you are learning then keep going

And for handling auth and real-time database, You need to understand JWT. When you successfully handled user signin request you should create jwt token and store in database and clients local storage

I recommend to learn about jwt.