OKF Explorer OKF knowledge page
Record metadata
type: "Glossary term"
title: "Bearer token"
description: "A credential where mere possession grants access."
tags: [glossary]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
aliases: "bearer token; bearer"
status: stable

Definition

A credential where possession is enough — anyone holding it can use it, so a stolen token can be replayed. Mitigated by sender-constrained tokens.

Used in this bundle

Appears in: oauth-2-0.

Related terms

sender constrained token, workload identity.