TOKEN

The literal path segment that identifies token-issuance endpoints, e.g. /{productType}/oauth2/token/ and /{productType}/token/. The OAuth2 token endpoint mints the consent token and must therefore be authenticated with the regular API-user Bearer token, not the (not-yet-issued) consent token — so it is excluded from OAuth2 consent-token routing even though its path contains OAUTH2.