# Generic Token Handling

This chapter so far has discussed how tokens are provided, validated, and cancelled in the STS. These operations are (at least in theory) relatively independent of WS-Trust. For example, they could be used as an API to provide/validate/process, etc. tokens.

In this section we'll be exploring the larger picture of how this internal token handling functionality works in the context of a client invocation. In this section we will cover some common functionality that is used by all of the WS-Trust operations in the STS implementation.

### In this section

* [AbstractOperation](https://help.qlik.com/talend/en-US/esb-sts-user-guide/8.0/abstractoperation)
* [Request Parsing](https://help.qlik.com/talend/en-US/esb-sts-user-guide/8.0/request-parsing)
* [The TokenIssueOperation](https://help.qlik.com/talend/en-US/esb-sts-user-guide/8.0/tokenissueoperation)
* [The TokenCancelOperation](https://help.qlik.com/talend/en-US/esb-sts-user-guide/8.0/tokencanceloperation)