type: object
description: "A short-lived access token. Opaque; clients must not decode it."
required: [accessToken, tokenType, expiresIn, scopes]
properties:
  accessToken:
    type: string
    description: "The token. Send it as `Authorization: Bearer <token>`."
  tokenType:
    type: string
    enum: [Bearer]
    description: "Always `Bearer`."
  expiresIn:
    type: integer
    description: Seconds until the token expires.
  scopes:
    type: array
    description: "Scopes the token actually carries, which may be fewer than requested."
    items:
      $ref: ./Scope.yaml