access token
RU: access-токен
A short-lived credential, defined in OAuth 2.0 (RFC 6749), that a client presents to a resource server to access protected resources on behalf of a resource owner. It encodes scope and expiry; the resource server validates it without contacting the authorization server if the token is a self-contained JWT.