Can you link to any tool which uses bearer tokens and doesn't grant them through oauth2?
Or it's internal, please explain how the token is obtained.
I haven't seen any to date but I guess I could be wrong
These are bearer tokens, in that the bearer gets granted access by that token alone.
You happen to send it along in a Basic authentication in HTTP instead of as an Authorization header, but it is a bearer token all the same.
No OAuth2 flow required.
Yes: https://www.pelion.com/docs/device-management/current/integr...
(I know I've seen and used many others, but Pelion comes first to mind because I used to work on it.)
Authorization: Bearer <API Key>.