Token

Typically refers to an authentication token that may be used for user authentication. A Stroom API Key is a form of authentication token.

Tokens are generally set in the HTTP header Authorization with a value of the form Bearer TOKEN_GOES_HERE. Tokens may contain information, e.g. a JSON Web Tokens (JWT) or simply be long strings of random characters (to essentially make a very secure password), like API Keys.

Tokens are associated with a Stroom User so have the same or less permissions than that user. Tokens also typically have an expiry time after which they will no longer work.