What are the different ways to implement user authorization in systems?

There are several common ways to implement user authorization in systems:

• Basic Authentication: transmitting login and password in HTTP request headers. Simple but less secure.
• Session-based Authentication: after successful login, the server creates a session and stores its ID in a cookie. The server checks the session on subsequent requests.
• Token-based Authentication: the server issues a token (e.g., JWT), which the client sends in request headers. The token contains authorization info and can be verified without database access.
• OAuth / OAuth2: an authorization protocol that allows third-party applications to get limited access to user resources without sharing passwords.
• OpenID Connect: an extension over OAuth2 for user authentication.
• Two-factor authentication (2FA): an additional confirmation step (SMS, app generator codes).

The choice depends on security requirements, convenience, and system architecture.