🎫
Bearer Token
Session Management
A token that grants access to whoever has it.
Definition
A bearer token is like a ticket: whoever holds it can use it to access a service.
In plain English
A token that grants access to whoever has it.
Why this matters
Why it matters: If it leaks, someone else can use it without your password.
Example
Example: An API call includes a bearer token in the Authorization header.