Token

Also written: Bearer token, Authorization header

A long secret string sent in a header such as `Authorization: Bearer <token>` to prove who is calling. The server answers 401 if it's missing or wrong, and 403 if the caller isn't allowed.