Cotter now generates access tokens and refresh tokens on authentication. We'll first go over the concepts of OAuth 2.0 and the tokens before we jump in on how to use it.