"Phoenix 1.6 ships with a new phx.gen.auth command for a complete authentication solution bootstrapped into your application" - hope it's a decent implementation. Setting up a JWT authentication took me days while learning phoenix/elixir and it is the sole reason why I never went with Phoenix for any other project. So many components involved.