what's your go-to for api authentication and authorization

Hey everyone, I've been giving a lot of thought to API security lately. We've relied on JWTs before, and they've been decent, but I'm wondering about what else is out there. What do you all find works best for API authentication and authorization, especially with microservices? Are you still using JWTs, or have you moved on to OAuth2, or maybe something totally different? What have been the pros and cons for you?