How to Use Session Auth to Enhance Your Website

The underlying protocol, is stateless. So it has no concept of a session. You have to log in and the backend sets the cookie for the next request to know it's you. And then if you need some other client to come along, that's when you need to go to one of the token methods,. Be aware that it can be very complex. There are a dozen third party ways to do it.