Comparativa de los métodos de autenticación en APIs: JWT vs OAuth vs API Keys

Abstract

Abstract: In the current context of modern application development, the need to protect API access has become increasingly important. Various authentication methods such as JSON Web Tokens (JWT), OAuth 2.0, and API Keys have become popular, each with advantages and limitations. However, difficulties persist in choosing the most appropriate mechanism based on the type of application and the required level of security. This work, developed at the Universidad Técnica Particular de Loja (UTPL), aims to compare the aforementioned authentication methods, evaluating their security, performance, and applicability through the implementation of API prototypes and the execution of simulated attack tests. An applied methodology with an experimental approach will be applied, using security testing techniques and response time analysis as the main tools. The results obtained will provide practical recommendations to developers and organizations on the most appropriate method for different usage contexts, contributing to strengthening security in the development of modern APIs.