Login, Access Token and Permissions for multiple APIs

Hi @nvivot

A couple of comments:

The opaque token is part of the standard.

If your applications is complex enough that it requires 100s of different APIs with different security requirements, then it makes sense that it would requires 100s of access tokens. If you do complex things, your architecture will be complex.

John