What kind of authentication do you want? For cookie-based one you can use Plug.Conn.put_session/3 and Plug.Conn.get_session/2 (after the session has been fetched, which is done by the :fetch_session plug in the default phoenix :browser pipeline in the router). For header-based authentication I usually use bearer tokens which are stored in the database alongside other user / account data.
