When it comes to API authentication, I usually stick to a few tried-and-true methods.

lately, i've been thinking a lot about how we secure our apis. beyond the basics like oauth2, what are your preferred methods for authenticating users and services? are you seeing a shift towards newer standards like jwt, or are more traditional token-based approaches still winning out for you? curious to hear about the trade-offs you've encountered