Access Token

To provide a short term Authorisation to a client. access_token normally is hashed in a form of JWT

When this access_token expired, we need to use Refresh token to renew the Access_Token without the need of re-logging in.

Access token flow:

Source: Client Credentials Flow (auth0.com)

For Refresh token flow, see: Refresh token