The opaque bearer token to send as part of the Authorization request header.

The number of seconds before the access token expires.

If set, this provides the ability to get a new access_token after it expires using a refresh endpoint.