Bearer Token | Platform of Trust - Guides (2024)

In encoded form, it looks like eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJzY29w...DVs5aaf, as you might have seen in many examples and guides. A bearer token is easy to decode and no information is hidden, because the purpose of bearer token is to pass information with signed by signature. When signature is validated, the data can be trusted. If you want to decode token you can do it online.

curl --request POST \ --url https://api-sandbox.oftrust.net/apps/v1 \ --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJzY29w...DVs5aaf' \ --header 'Content-type: application/json' \ --data '{ "name": "Example Application", "description": "Application description", "privacyPolicyUrl": "http://example.com/privacy.html", "webPageUrl": "http://example.com/application.html", "iconUrl": "http://example.com/icon.png", "scopes": "", "defaultScopes": "", "redirectUris": "https://example.com/auth-callback", "defaultRedirectUri": "https://example.com/auth-callback", "groupId": "7a5c0197-7e05-4180-8d6f-104911880eee" }'
Bearer Token | Platform of Trust - Guides (2024)

FAQs

Bearer Token | Platform of Trust - Guides? ›

Bearer token

The token is a text string, included in the request header. In the request Authorization tab, select Bearer Token from the Type dropdown list. In the Token field, enter your API key value.

How do you specify a Bearer Token? ›

Bearer token

The token is a text string, included in the request header. In the request Authorization tab, select Bearer Token from the Type dropdown list. In the Token field, enter your API key value.

What does a Bearer Token do? ›

The bearer token is a cryptic string, usually generated by the server in response to a login request. The client must send this token in the Authorization header when making requests to protected resources: Authorization: Bearer <token>

What are the Bearer Token types? ›

Bearer tokens are a general class of token that grants access to the party in possession of the token. Access tokens, ID tokens, and self-signed JWTs are all bearer tokens.

Should you log bearer tokens? ›

You should not log access tokens. Anyone who has access to access tokens can temporarily hijack those accounts.

Top Articles
Latest Posts
Article information

Author: The Hon. Margery Christiansen

Last Updated:

Views: 6244

Rating: 5 / 5 (70 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: The Hon. Margery Christiansen

Birthday: 2000-07-07

Address: 5050 Breitenberg Knoll, New Robert, MI 45409

Phone: +2556892639372

Job: Investor Mining Engineer

Hobby: Sketching, Cosplaying, Glassblowing, Genealogy, Crocheting, Archery, Skateboarding

Introduction: My name is The Hon. Margery Christiansen, I am a bright, adorable, precious, inexpensive, gorgeous, comfortable, happy person who loves writing and wants to share my knowledge and understanding with you.