An OAuth 2.0 token is a short-lived token derived from a service account. It's Google's standard auth model and it's more secure than static server keys.