I have an out of the box solution for REST API authentication I worked on with others, the WordPress IndieAuth plugin. I agree that integrated options not being there is a problem. But there are a few maintained solutions.