If you use your own api interface, of course, you don't need a token, but you need a token to use someone else's API or formally develop it. Token has two purposes, 1 is to confirm the legitimacy of the user's identity, but the user does not log in for a long time and asks him to log in again (a bit like website development, cookie).