Wherever the API specifies you should.
If it's OAuth2, it should support either in the Authorization header or as a query string parameter. Wherever possible, I like to pass it in the Authorization header.
Sign in to participate in this thread!
The Laravel portal for problem solving, knowledge sharing and community building.
The community