The Copenhagen Book

The Copenhagen Book provides a general guideline on implementing auth in web applications - https://thecopenhagenbook.com/

1. Server-side tokens
2. Sessions
3. Password authentication