Authentication methods for web applications

I am new to authentication schemes in web applications. I read several articles and blogs but could not find a proper list of several authentication methods that are used in web apps. Some of the methods i came through were basic authentication, server side authentication and Token based authentication (JWT). Some methods prevented XSS attacks but not CSRF while others failed to prevent XSS attacks. Is't there any method to avoid XSS as well as CSRF attacks ? Also, what are popular methods used by most organisations ?