A client connects to a server through an application (not a web browser) with a long-running TCP connection. TLS is used, so the communication is secure.
Is there a standard way to implement a password-based login mechanism in this scenario?
The simple option would be this: have the client submit a username and password just once after the connection is established, and then have the server hash the password and check against a stored value (again, just once). Since the TCP/TLS connection is stateful, I believe there is no need for session cookies/tokens. Is this simple option satisfactory?