Authentication Token Generation Token Revocation Token Expiry Token Access: who can create and revoke tokens