Bearer Tokens Based Authentication

Bearer Tokens can be either

  • OAuth Authorization Code Grant  Flow OR
  • Client Credentials Grant Flow

OAuth Authorization Code Grant

While there are a number of different ways to do so, if a user is involved, the Authorization Code grant is the recommended choice. Let’s take a deeper look at the Authorization Code grant and how it can be used to protect your API.