Depends on the framework you use. Rails and Django have a lot of this built in or as widely used plug-ins. In node.js you have to do a lot from scratch every time, or you can use a service that provides this like Auth0