Session token
Also called: Auth token
A string the server issues after login that proves who you are on later requests.
Definition
After a successful login the server returns a token (often stored in a cookie or the device's secure storage). Every later request sends it. Logging out should invalidate it, and it should expire after a while.
In practice
After "Log out of all devices", a phone that was logged in should be sent back to the login screen on its next request.
Learn it in context
Lessons that use this term.