Glossary: Web App Security and Authentication

Access token

Also written: access tokens

A short-lived token sent with each API call to prove permission. It says what the app may do, not who is at the keyboard.