What is the best authorization protocol for back-end projects?

What is the best authorization protocol for back-end projects?
0

#1

My previous experience was with the passport strategies with nodejs. However they are cumbersome to implement sometimes.

Rafase282 and raisedadead suggested JWT. Here some links:

Rafase282 also pointed me to his implementation:

What do you think? Is there any point to learn other strategies if we have JWT? What should we focus on?


#2

JWTs seem to be the most popular new kid on the auth block. Simply passing tokens back and forth, really.

However, depending on your requirements, I also kinda like the Passwordless or One-Time-Password ideas. They, too, work with tokens and could simplify a lot, both for users and developers.