ader of the following form (no double quotes here):

       Authorization: Bearer &lt;access_token&gt;

    In addition, providing the access token via a HTTP query parameter
    for GET requests MAY be supported by the server, although its use
    is not recommended, due to its security deficiencies; see [BEARER,
    <a href="#section-2.3">section 2.3</a>].


<span>de Jong                                                         [Page 9]</span>
</pre><pre><a name="page-10" id="page-10" href="#page-10"> </a>