AccessToken defines how requests are authenticated. Every authenticated
request must specify an AccessToken guid, e.g. via the Authorization header.
An AccessToken MIGHT have a client - this is the account that is actually
making the request. If this is missing, then the account is making a request
as itself.
An AccessToken also has zero or more Scopes, upon which the authenticating
API can implement authorization.
AccessToken defines how requests are authenticated. Every authenticated request must specify an AccessToken guid, e.g. via the Authorization header.
An AccessToken MIGHT have a client - this is the account that is actually making the request. If this is missing, then the account is making a request as itself.
An AccessToken also has zero or more Scopes, upon which the authenticating API can implement authorization.