How bad is it to pass oauth token in _GET or _POST?

Question

Passwords

I am using laravel passport to generate api tokens for the application.
Frontend: mobile application, web (vue.js).
Redefined request so that if there is a token in post or get, it is added to the header.
What is it for?

Answer 1

It is fraught with the fact that especially attentive uncles can take your token and use it for their own purposes. If the application grows, then believe me, you do not want it. So it's better not to do that.