Does bubble use token based authentication?

[Zaque]

Does anyone know what type of authentication bubble provides when signing / logging in users through my app?

Token based to prevent man in the middle attacks?