JWTs
JSON Web Tokens (JWTs) are a signed JSON object sent in the Authorization header in all requests towards the API.
Once users log in, they receive a JWT (referred to here as auth_tokens) allowing them to access APIs that are permitted with that token.
The following example shows how an auth_token is included in the Authorization request header (the Bearer type) when creating a new user.
An auth_token shouldn’t be confused with an application_token.
Application tokens are long-lived tokens that are sent in a POST request body to retrieve an auth_token instead of using a user and password combination.