Cesium ion access: replace the default token with an application-specific one

Cesium's token guide cautions against shipping the broad default token. A Cesium ion application should restrict scopes and asset access to its intended use.

Test permitted and excluded assets. If URL restrictions are configured, verify the actual request context rather than assuming every client supplies the expected referrer.