Ask HN: What are some good resources and patterns for authentication?

The oauth guide[0] is incomplete and outdated but helpful. Auth0 has a lot of good information and stackoverflow does as well, although a bit balkanized.

Do you have resources or design patterns for authentication that provide a conceptual walkthrough of the components. Not the implementation, but the design & possibly routing diagrams of:

* creating a new user & account routing & login

* confirming email and moving user from temp to verified account

* transactional email & alerting user of sign ins as well as password updates.

* 2fa

Scotch.io has a pretty good guide I looked at a few years ago. It is great for a beginner side project, but most guides seem at that level. Get password, use bcrypt, verify, send token/cookie.

[0]https://www.owasp.org/index.php/Guide_to_Authentication