How to correctly implement user registration and login?

Question

User identification

How to correctly implement the registration and login of the user on the site? As I understand it, all the emphasis should be on creating an API. And do I understand correctly that when registering in the database, you need to create an object and bind all data created by the user to this object? And at the entrance to make a request to the server, check the entered login and password in the database and give the data of the logged in user? There is a sea of ​​information on the Internet and all of it is different. Is there any proven way?

Answer 1

It's not very clear what the API has to do with it.
In the simplest case, when creating a user, you write his data to the database, and when logging in, you check the login / password and do what is required in your system (start the session, issue a token, maybe something else)