Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
A token with no extra proof attached, meaning whoever bears it gets in. It rides in an HTTP header as `Authorization: Bearer <token>`. Nothing checks that the sender is the person it was issued to, so protecting it in transit and at rest is the entire defense.