Hi there, I’ve been off from Elixir for quite a while, recently I started picking it up.

I’m making a phoenix application which will use Discord Oauth via Ueberauth as the only way of authentication, so no email/password mixes.

I’m trying to make it as good as possible and that’s why I tried to look up into Guardian. But, I didn’t find any reason of why to use it; or generally why to ever use it.

I understand that you can easily make session-based authentication without Guardian. Are there any specific reasons why I would use Guardian over session based? Should Guardian maybe be used in some specific niches? I honestly don’t have a feeling about Guardian.

Both Ueberauth and Guardian are authentication libs so that’s confusing for me as well. The only videocasts I’ve found with Ueberauth and Guardian focused on Ueberauth but with a email/password combo rather than oauth.