source/Core/Session.php
protected function _isValidRemoteAccessToken()
    {
        $inputToken = \OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('rtoken');
        $token = $this->getRemoteAccessToken(false);

        return !empty($inputToken) ? ($token === $inputToken) : false;
    }
protected function _isValidRemoteAccessToken()
    {
        $inputToken = \OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('rtoken');
        $token = $this->getRemoteAccessToken(false);

        return !empty($inputToken) ? ($token === $inputToken) : false;
    }
protected function _isValidRemoteAccessToken ( ) { $ inputToken = \ OxidEsales \ Eshop \ Core \ Registry :: getConfig ( ) -> getRequestParameter ( 'rtoken' ) ; $ token = $ this -> getRemoteAccessToken ( false ) ; return ! empty ( $ inputToken ) ? ( $ token === $ inputToken ) : false ; }
Checks if token supplied over 'rtoken' parameter matches remote access session token.

@return bool
Checks if token supplied over rtoken parameter matches remote access session token .