This is a simple module which uses OAuth2 Server to provide API tokens.

The API tokens are OAuth2 tokens that the user may manually create, assign scopes to, and revoke. They can last forever (until revoked), so they are appropriate for the user to configure directly (but with care) in whatever API client they may be using.

API tokens must be kept secret: they should be treated like passwords (although, in several ways, they are more secure than passwords).

Supporting organizations: 

Project information

Releases