No, an app access token, like any other kind of token, is technically a password, and should be treated as such.
The app access token, does not below to the user using your website, so the user should not be given that “password”
1 Like