How to securely transfer a session token?

Question

JavaScript

For example, there is a blog, a user enters the authorization page, fills out a form, a POST request is sent with a login and password in json format, the server runs through the database, if there is such a user, it generates a session token and poisons it back to the user, then the user makes a GET request with with this token, the question is how to SAFELY pass the token back to the server in a GET request?

Answer 1

Cookie or header