ApiSkills

Authentication · 5 min

Bearer tokens

A token you present as "Authorization: Bearer <token>" — the shape most modern APIs use.

A bearer token is a string that grants access to whoever "bears" it. You send it as Authorization: Bearer <token>. Your app has a static bearer token (it starts with bt_).

curl https://api.ifsjaipur.cloud/playground/auth/bearer -H "Authorization: Bearer YOUR_BEARER_TOKEN"

Bearer is the same header shape OAuth2 uses — the difference is only where the token comes from. Here it is a fixed per-app token; in OAuth2 it is a short-lived token you fetch first (see the OAuth2 lesson).

Tip · Because anyone holding the token can use it, bearer tokens should be short-lived and always sent over HTTPS.