How is the authorization process with a token carried out in the system?

Authorization using a token usually works as follows:

1. The user enters their credentials (login and password).
2. The server verifies them and, if correct, creates a unique token (e.g., JWT).
3. The token is sent to the client and stored (e.g., in memory, SharedPreferences, cookies).
4. For subsequent requests, the client sends the token in the header (usually Authorization: Bearer <token>).
5. The server checks the validity of the token, and if it is valid, grants access to resources.

Example in Java (simplified):

// Token validation in filter
String token = request.getHeader("Authorization");
if (token != null && validateToken(token)) {
    // grant access
} else {
    // deny access
}

Thus, the token serves as proof that the user has already authenticated and allows avoiding sending login and password with each request.