ZegnatHis micropub implementation also shows how he checks the Bearer token against an external token service (tokens.indieauth.com). But it is easy to imagine you do a completely localised check of the token, maybe even just against a static token you saved on the server.
