Sessions vs JWT vs Cookies: Understanding Authentication Approaches

Every web application needs to know who is making a request. But HTTP is stateless — it has no memory. Each request arrives blank. Authentication is the engineering discipline of solving this amnesia: