To use this API you simple pass to action GenerateToken a key that can be a Id from any other table.

This way the token will be valid just for that object.

If I call action GenerateToken with key '1' I will have a token valid for a specific entity.

So when I check it I have to pass a the token and key. This help to increase the security 

Beyond that Every thing is customizable.

You can set the period of time that the token will be valied.

You can say the format of the token. eg:  999***aaa (That means the token will have 3 numbers, 3 alpha numeric, and 3 chars.