API Testing · Junior · Question 21 of 75

How is a bearer token usually sent?

1Token: <token> in the URL path
2Cookie: bearer=<token> in every body
3Authorization: Bearer <token>

Show the answer

Correct answer: Authorization: Bearer <token>

Explanation

The Authorization header carries credentials. Tokens in URLs are risky because URLs end up in logs and browser history.

Further reading

Test yourself

Take the API Testing · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.