NextAuth also intentionally made username-password authentication difficult to use because they think signing in with your Twitter or Google account is better.
Meanwhile their home page advertises “own your data”.
Meanwhile their home page advertises “own your data”.
If not NextAuth/Auth.js, then passport.js?