Access tokens
Acquire and revoke access tokens.
Access tokens authorize API calls made on behalf of a signed-in user. Exchange a valid login token for an access token with the permissions and authentication context needed by your application, then revoke it when the session ends or the token should no longer be used.
Keep access tokens on your server, treat them as credentials, and request a new token when the current one expires.
Read Access tokens for the full authentication flow.