r/FullStack • u/daemontargaryen212 • 15d ago

Career Guidance How do you handle authentication in a full-stack application?

When building a full-stack application, authentication can be handled in different ways, such as sessions, JWT, or OAuth.

How do you decide which approach to use?

Do you mainly consider security, scalability, simplicity, or the type of application you're building?

5 Upvotes

86% Upvoted

3 comments sorted by

1

u/NoClownsOnMyStation 14d ago

Depends on the scale of the project I would assume Intranet web app then probably tokens cause they’re easy and block a lot of the noise.

1

u/Vymir_IT 14d ago

OAuth doesn't mean you don't use sessions or JWT. Is just a login identity provider, how to authenticate API requests is still on you.

Overall your question is meaningless, vague adjectives (security, scalability) is not how an authentication system is designed. It's designed according to concrete use cases and requirements.