Token-based authentication is a method that consists of several steps:
the client makes a request to a login endpoint with the user's credentials
the client receives a time-limited token
the client then sends this token as part of requests to other API endpoints
every API endpoint validates the token by checking it against a token database