I'm reading the book: Build APIs You Won't Hate, and it propose several Authentication methods:
- Basic Auth
- Digest Authentication
- OAuth 1.0a
- OAuth 2.0
- OpenID
- Hawk
- Oz
I have a application that will have differents components
- Internal APIs
- Laravel WebApp with FB / Google Login via Socialite
- VueJs
- Mobile App
I will not have a public API.
I was thinking of using JWT to secure my APIs, but as I don't see it in the book, I'm wondering if I am not making a mistake.
Any advice will be apreciated!