Industry Standard for API Authentication on MEAN Stack

Question

What tends to be the industry standard for API authentication? I'm looking at implementing an API for CRUD on a member management system and need authentication. I came across this article using JSON web tokens. I've also seen tutorials that mention using session based authentication, as does this one.

What is the industry standard for authentication of users to API access?

EDIT:
Is this article explaining tokens vs session based still relevant? It's over two years old.

Answer 1

我说OAuth 2.0已经成为使用中占主导地位的API凭证，但它远非最简单的选择。