Is it ok to pass the token via parameters at the end of the URL?

Question

User identification

Hello.
Is it ok to pass the auth token via a parameter in the url itself?
That is, for example, like this: example.com/api/getNews?token=[My Token] The
question is not about paranoia and the answers "you can hack anything" please don't, I just want to understand how it's done or not? Thank you.

Answer 1

If the API, then it is much more common to use the authorization Bearer header. And so - someone does it, probably, but it’s definitely not a good practice