OAuth or JWT? Which one to use and why?

I am starting to learn about token based authentication and I am trying to learn how to implement it in Laravel 5. I have come across two very popular technologies for doing this but I am confused since I am new to both these technologies.

This article at Medium says I should go with lucadegasperi/oauth2-server-laravel which I am sure is a very popular package in the community judging by the number of stars on Github and the number of references that have led me to it. This one is supposed to help me with OAuth implementation.

This other article at Scotch.io encourages me to use tymondesigns/jwt-auth which is also very popular again judging by the number of stars on Github.

At this point I am indecisive of which one to use mostly because I am a novice developer and I haven't worked with either of them.

Could anyone point out to me what are the pros and cons to each one of them and which one I should implement? Will my project type also dictate what kind I should use? And how?

Moreover if you are making an argument that I should choose one over the other, could you also point out good resources that would help me start with them. Other than the two links I provided myself of course.

JWT is a simple authentication protocol, Oauth is an authentication framework.

An experienced developer will take about a month to fully understand and implement Oauth. An experienced developer can pick up the JWT protocol in about a day of reading the specifications. So basically, it boils down to your specific use-case.

If you want simple stateless http authentication to an api, then JWT is just fine and relatively quick to implement, even for a novice developer.

A few JWT resources for you:

• http://jwt.io/
• https://auth0.com/docs
• http://www.toptal.com/web/cookie-free-authentication-with-json-web-tokens-an-example-in-laravel-and-angularjs

And an Oauth resource:

• http://tutorials.jenkov.com/oauth2/overview.html

JWT stands for JSON Web Token. As the name suggests, it is a token for transferring secured data as JSON between two parties.

Oauth2, on the other hand, is a set of rules or a procedure commonly called a framework that helps in the process of authenticating and authorizing two parties to transfer secured data.

Following diagram will explain how oauth2 works :-

Here is a more detailed explanation of the steps in the diagram:-

1. The application requests authorization to access service resources from the user
2. If the user authorized the request, the application receives an authorization grant
3. The application requests an access token from the authorization server (API) by presenting authentication of its own identity, and the authorization grant
4. If the application identity is authenticated and the authorization grant is valid, the authorization server (API) issues an access token to the application. Authorization is complete.
5. The application requests the resource from the resource server (API) and presents the access token for authentication
6. If the access token is valid, the resource server (API) serves the resource to the application

JWT and OAuth2 are entirely different and serve different purposes, but they are compatible and can be used together in transferring secure data.

Where JWT come into play in 3rd 6th steps of oauth2

Update based on comments.

We can use Oauth and JWT separately. In Oauth2, instead of JWT, we can use other token mechanisms. Likewise, we can use JWT independently to secure our API by signing them using a private secret or a public/private key. So that we can transmit authentication claims across APIs