API Design · Junior · Question 31 of 75

How is a bearer token usually sent to an API?

1In the request body of GET requests
✓Correct answer: In the Authorization: Bearer <token> header
3As a query parameter ?token=... in every request

Explanation

Tokens in URLs end up in logs, browser history and referrers. Headers are the standard place.

Further reading

Test yourself

Take the API Design · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.