Avoid OAuth

But what’s the alternative? “Use static API tokens” doesn’t really say much. What’s an actual alternative that doesn’t require a custom solution/reinventing the wheel?