Back to Glossary

Token

الرمز (Token)

GLS-000104

Beginnerauth-security1 min read
access tokenbearer tokenid tokenauth tokenfirebase token
Official DocsSign in to save & take notes

Definition

A string that proves identity or grants permission — passed between client and server to authenticate requests.

سلسلة نصية تثبت الهوية أو تمنح الإذن — تُمرَّر بين العميل والخادم للمصادقة على الطلبات.

Why It Matters

Every admin API request to 404Fault requires a valid token. Without it, the request is rejected with 401 Unauthorized.

كل طلب API للمشرف في 404Fault يتطلب رمزًا صالحًا. بدونه، يُرفض الطلب بـ 401 غير مُصرَّح.

Full Definition

In authentication, a token is a signed string issued by an auth server after successful login. The client stores it and sends it with every subsequent request. The server verifies the token's signature to confirm the request is legitimate. Firebase issues ID tokens (JWTs) that encode the user's UID and roles. Seed routes on 404Fault use a separate GLOSSARY_SEED_TOKEN for internal protection.
في المصادقة، الرمز هو سلسلة موقَّعة يُصدرها خادم المصادقة بعد تسجيل دخول ناجح. يخزّنه العميل ويرسله مع كل طلب لاحق. يتحقق الخادم من توقيع الرمز لتأكيد شرعية الطلب. Firebase يُصدر رموز هوية (JWTs) تُشفِّر UID المستخدم وأدواره. مسارات البذر في 404Fault تستخدم GLOSSARY_SEED_TOKEN منفصلًا للحماية الداخلية.

Example Usage

“Firebase Auth issues an ID token after login. The client sends Authorization: Bearer <token> in API requests. The server calls verifyIdToken() to validate it.”

“Firebase Auth يُصدر رمز هوية بعد تسجيل الدخول. يرسل العميل Authorization: Bearer <token> في طلبات API. يستدعي الخادم verifyIdToken() للتحقق منه.”

Knowledge Graph

AI Builder Tips

Sign in for more features

Avoid these mistakes when using Token:

1

Storing tokens in localStorage (XSS risk) instead of HttpOnly cookies

2

Not checking token expiry — expired tokens should be rejected

Sign in to unlock guided AI explanations from AI Teacher.

Generate a Prompt

Copy this prompt and use it directly with any AI model — no setup needed.

Ready-to-Use Prompt
Help me build a project using Token.

Explain:
1. What is Token and why it matters
2. The core architecture and required tools
3. Step-by-step implementation plan
4. Common mistakes to avoid: Storing tokens in localStorage (XSS risk) instead of HttpOnly cookies, Not checking token expiry — expired tokens should be rejected
5. Best practices and production tips

Official Resources

Official Documentation
Browse all AI termsCreate free account