What is the best authorization protocol for back-end projects?

[evaristoc]

My previous experience was with the passport strategies with nodejs. However they are cumbersome to implement sometimes.

Rafase282 and raisedadead suggested JWT. Here some links:

• https://jwt.io/introduction/
• https://securedb.co/community/jwt-vs-jws-vs-jwe/

Rafase282 also pointed me to his implementation:

• “https://github.com/Rafase282/Mangadb/blob/master/controllers/auth.js”

What do you think? Is there any point to learn other strategies if we have JWT? What should we focus on?

[batjko]

JWTs seem to be the most popular new kid on the auth block. Simply passing tokens back and forth, really.

However, depending on your requirements, I also kinda like the Passwordless or One-Time-Password ideas. They, too, work with tokens and could simplify a lot, both for users and developers.