Do Google and Yandex index pages with random and complex URLs (and is it possible to store the session ID in the URL)?

Question

Google

Suppose my web server has a URL like

https://example.com/lkfrngiea75gulorgjoy56pwkhbmbw94hgfb4y5ugt.html

Will search bots be able to find and index it (assuming it is not listed in robots.txt)? And if so, how?
Sometimes the session ID is stored in the URL ( https://example.com/session_id/index.html), which is understandable, which session_idquickly becomes outdated, but still, if bots are able to detect such URLs, in theory, such an authorization mechanism is not secure?

Answer 1

Will search bots be able to find and index it

of course. If you have counters on your site, for example. But even if not, browsers and browser extensions can and do leak it. The link can light up somewhere in the Referer.

in theory, such an authorization mechanism is not secure

there is no reason to use it at all, and of course it is not safe. The link is not a secret at all. It is stored in the browser history (and just glows in the address bar), so that any person who briefly accessed the computer after you or when you moved away (even access is not needed if your eyesight is good) without any knowledge and skills will have access to restricted content. A person can share a link (people do not usually see this as a threat).

Answer 2

- is it possible to store the session ID in the URL?
- it is forbidden.