Modern authentication: passkeys, OIDC, sessions - the real short list

A popular HN thread reignites the question: how should we authenticate an app in 2026? The answer is no longer "JWT + refresh token". A clear overview.

Jul 11, 2026 at 17:19 15 6