An access token and how long it remains valid.
How long the token remains valid, measured from when it was issued.
The access token itself, sent as a bearer credential.