Compare all 4
Sort by any column to find the right fit. Click a name to open its details.
| API key | Request → response (header) | No | Low | HTTP (custom header) | Low | Server-to-server, partner APIs |
| JWT | Request → response (Bearer) | No | Low | HTTP (Authorization header) | Medium | APIs, stateless services, microservices |
| OAuth2 | Multi-step (client ↔ IdP ↔ API) | No | Higher (handshake) | HTTPS redirects | High | Delegated access, third-party login (Sign in with…) |
| Session | Request → response | No | Low | HTTP (Cookie header) | Low | First-party web apps, browsers |