Token-Based vs Session-Based …

– Finally an access token is returned to the client through a redirection URL configured during the registration. The returned access token is a bearer token. – Depending on the implemented OAuth flow for the query of the access token, a refresh token is returned. This is used for access token renewal without user consent. ................
................