How do you handle API authentication securely in production apps?

Hi everyone,I’m working on a web application and I want to understand the best practices for handling API authentication in production. What are the most secure methods you recommend (JWT, OAuth, sess