> standardized, conventional set of practices and code that are well known and not hard to implement. Every time I ask somebody about this, they recommend slig

> standardized, conventional set of practices and code that are well known and not hard to implement. Every time I ask somebody about this, they recommend slightly different practices or else insist that you can’t use a checklist approach. I partially rolled my own auth as an experiment to see what they meant and it seemed not too difficult, but I worry I missed things and hesitate to use it for production. (Still used libraries though like bcrypt and a session encryption library)