title: What are Bearer Tokens and token_type in OAuth 2?
body: <p>I'm trying to implement the <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-15#section-4.3" rel="noreferrer">Resource Owner &amp; Password Credentials</a> flow from the OAuth 2 spec. I'm having trouble understanding the <code>token_type</code> value that gets sent back with a valid response. In the spec all the examples show <code>&quot;token_type&quot;:&quot;example&quot;</code> but says it should be</p>
  <blockquote>
  <p>token_type
  REQUIRED.  The type of the token issued as described in
  <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-15#section-7.1" rel="noreferrer">Section 7.1</a>.  Value is case insensitive.</p>
  </blockquote>
  <p>Can someone please explain this to me?</p>