Temporary credentials used to access an authorized resource.
Short-lived credentials that grant access to a resource within an authorized scope. Its lifetime is deliberately kept short to limit the damage if it ever leaks, and the standard practice is to obtain a fresh one via a refresh token whenever it expires.
© 2026 ITBGM