API key vs token

Access tokens are credentials used to access protected resources. Access tokens are used as bearer tokens . A bearer token means that the bearer (who holds the access token) can access authorized resources without further identification. Because of this, it is important that bearer tokens be protected.

OAuth2 is very flexible . JWT implementation is very easy and does not take long to implement. If your application needs this sort of flexibility, you should go with OAuth2. But if you don’t need this use-case scenario, implementing OAuth2 is a waste of time.

Basically, JWT is a token format. OAuth is an authorization protocol that can use JWT as a token . OAuth uses server-side and client-side storage. If you want to do real logout you must go with OAuth2.

Acquiring a bearer token