Cookie Authentication vs JWT in ASP.NET Core: Which Should Your API Use?

Cookie authentication and JWT bearer tokens are both first-class citizens in ASP.NET Core's authentication middleware, and both can secure an API. The problem is that teams regularly pick one without