In API security, what is the purpose of an access token in OAuth?
- Authenticate the Client
- Authorize the Client
- Identify the Resource Server
- Identify the User
The access token in OAuth is primarily meant to identify the user who authorized the application, allowing the application to access resources on behalf of that user. It does not necessarily identify the client or resource server.
Loading...
Related Quiz
- To simulate real-world scenarios, _________ should be incorporated into the testing process of a third-party API integration.
- The _________ of APIs, especially in a microservices environment, poses a significant challenge for automated testing.
- How does throttling or rate limiting impact third-party API integration, and how should it be tested?
- How can implementing a Content Delivery Network (CDN) address performance bottlenecks in APIs?
- What advanced feature in Postman allows for dynamic and conditional scripting in tests?