fyi I'm a total newbie to server stuff (I'm an app developer, trying to implement a simple but secure api back end)
It sounds simple enough, user sends his username/password, if it authenticates, you give them a token, and they include that token in all future requests.
But every example I find online to use a 3rd party auth provider (like auth0 or Facebook) for the log-in part of this process.
Is there a reason why I cant just send an encrypted username and password in a regular api request to my own server, check it against a table that contains a hashed password, and generate a token on my own server? If not why isn't there any examples of this, if there are please point me to it.
I'm developing with ktor (kotlin), but any java style language such as node will do.