JWTs are not sessions. Sessions are not obsolete. OAuth is not an authentication protocol. Here's what each actually does, when to use it, and the security mistakes I've seen in production.
Networking & APIs
DNS, WebSockets, authentication, rate limiting -- how the internet actually works.
