Token

Also written: Bearer token, Authorization: Bearer

A long secret string sent in a header, such as `Authorization: Bearer <token>`, that proves who the caller is. The server answers 401 if it is missing or wrong.