API access tokens: how do they work, and how do they compare to authentication using API keys?

Authentication using API keys is one way to authenticate requests to an API. Authentication using access tokens is another popular method. In this short video we'll learn how each one works, and how they compare.

00:00 API key authentication
01:03 Access token authentication

#API #authentication

[gensys]

Dave your lessons are amazing clear clean and very helpful. I would like to thank you !

[christosmitsiopoulos]

this is a compact and amazing explanation on access tokens. great job sir.

[waldchiller]

Thx I get confused by this topic a lot. That helped.

[Cenzou]

Thank you for the video! When API decodes the token and verifies if valid, how come that doesn't require DB queries?

[adorablecheetah]

One question please, won't this method of access token be vulnerable to an attack? If someone got to your access token then how would the system identify its not you and its someone else?

[craigc]

From a security perspective which is more secure?

[darshanngful]

Hi, I am getting WordPress error, "Authorization token does not found"

I am getting error when I login to WordPress, but website is not affected.

Can you help with solution

[jyshaikh]

What should be the life of this token? Do they remain active forever? What is the best life in seconds /minutes/hours for this token with its advantage and disadvantage?

[samkhazi]

how can I get client secret key for refresh token ???

[mario-t]

Dave, thanks so much, the best explanation. Now I need to find what tool I can use to get token, anybody can recommend ? heard about postman