Access token Windows

Basic steps

In computer systems, an access token contains the security credentials for a login session and identifies the user, the user’s groups, the user’s privileges, and, in some cases, a particular application .

Sending an access token in a request When you put a VerifyAccessToken policy at the front of your API proxy flow, apps must present a verifiable access token (also called a “bearer token”) to consume your API. To do this, the app sends the access token in the request as an “Authorization” HTTP header .

An OAuth Access Token is a string that the OAuth client uses to make requests to the resource server . Access tokens do not have to be in any particular format, and in practice, various OAuth servers have chosen many different formats for their access tokens.