Authorization operations. In this release, the only operation supported is the request (or re-request) of an access token, which the client must supply in all subsequent requests.