Purpose

 An 2FA flow feature implementation  WS authorize-an-approval suppose token with right scopes list at token in HEADER (example: -H 'authorization: Bearer b3IxNTBBZXR6VWg3MHdYNEFoL3ZUUT09' ).

It means the following (see details in specs for WS: Create Token).