Access controls are essential for securing APIs. OAuth enables token-based authorization, where access controls demand access tokens that fulfill certain requirements.

Source: The New Stack