Also called “Token auth” is an approach where a tokens serves as the key to access a protected resource. Often used for APIs.


As the token, often a JWT is used.

Compared to Session auth with cookies or cookie auth with JWTs the relevant information is send within the actual request - not as cookies.