I'm really interesting in what tools others are using to protect their apps or services in terms of authentication!
I know auth is normally a really boring topic, but I think we can all agree on how crucial it is!
We built our own Authentication service to integrate with Hasura.
It's open source here: https://github.com/nhost/hasura-backend-plus
It uses JWT and refresh tokens and we provide a JS library to make registration/login easy: https://docs.nhost.io/libraries/nhost-js-sdk#auth.