User283571144 posted
Hi sudip_inn,
so tell me what is Access token, Refresh token, bearer token ?
Access token and bearer token both are same ?
In my opinion, access token is an object which could contain some security context.
If the password is authenticated, the system produces an access token.
Every process executed on behalf of this user has a copy of this access token.
The system uses an access token to identify the user when a thread interacts with a securable object or tries to perform a system task that requires privileges.
More details, you could refer to follow link:
https://en.wikipedia.org/wiki/Access_token
https://msdn.microsoft.com/en-us/library/windows/desktop/aa374909(v=vs.85).aspx
Refresh token:
A Refresh Token is a special kind of token that can be used to obtain a renewed access token —that allows accessing a protected resource— at any time.
You can request new access tokens until the refresh token expires.
Refresh tokens must be stored securely by an application because they essentially allow a user to remain authenticated forever.
Bearer token:
As far as I know Bearer token is a type of access token.
It is the most common OAuth 2 token type.
It provides very little in terms of security and relies heavily upon the ability of the client to keep the token secret.
Bearer tokens are the default setting with all configured endpoints.
Generally you will not need to ever construct a token yourself as the provided servers will do so for you.
Best Regards,
Brando
