引用一下 RFC 6749 的定義:
Access tokens are credentials used to access protected resources. An access token is a string representing an authorization issued to the client. The string is usually opaque to the client. Tokens represent specific scopes and durations of access, granted by the resource owner, and enforced by the resource server and authorization server.
你應該也不會說演唱會的門票是用戶的象徵吧
我自己還是比較偏好不翻,但其實這裡的重點是「象徵物」這個翻譯應該是很不好。