[Maxion]

It's still a bit weird how there's no universal gold standard way to handle authentication with websites. JWT is the closest there is, and there are still enough open ends with it for there to be as many ways to implement it as there are developers.

[marcosdumay]

> there's no universal gold standard way to handle authentication with websites

Hum... HTTP has an entire authentication header.

There is also an entire set of standard practices to authenticate by cookies.

The only thing there isn't a standard is for handling authentication data with random code. As that's a pretty stupid thing to do.

[d-z-m]

Not sure if I could bring myself to call JWT for website authentication the "gold standard". I'd give the title to HTTP Basic Auth first.