Authorization in RESTfull

Question

OAuth

Gentlemen, tell me how to be with the token? Let's say a service client logs in through, say, OAuth and receives a token by which the server identifies it.
So how is this token stored on the server? After all, writing it, for example, into the database is not very safe, because if someone intercepts it, they can go under it.

Answer 1

Any HTTP request can be intercepted (listened). Though it is REST, though RPC. If it is scary to drive a token between the server and the client (cookie or query parameter), then you need to encrypt everything, for example, use HTTPS.