Some help regarding OAth and validation

You shouldn’t use a token generated from someone elses token generator

Like I said in my original post depends on your work flow

If you need to get data from information you have such as a name/ID then any token works

If you need data about the logged in user then you need a user token, like how the implict example works