Instructor
Ashish Thakur Replied on 03/10/2018
Basic or Digest tokens are dedicated to the authentication using a username and a secret/Password only.
Bearer tokens in HTTP requests are used to access OAuth 2.0 protected resources. Any party in possession of a bearer token (a "bearer") can use it to get access to the associated resources (without demonstrating possession of a cryptographic key). To prevent misuse, bearer tokens need to be protected from disclosure in storage and in transport.