Thanks. I'll check it out. It seems a vanilla client side JS guide would be helpful and I'm guessing/hoping validating a JWT on the server would be pretty standard.
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).