Building API - safe way to send password

I'm building a REST API开发者_运维知识库 and I am in doubt about the way the password's sent is safe?

The password is sent in the URL like this:

https://www.example.com/api-version/user-name/password/

---

Send it in POST payload (not in URL!) over SSL encrypted connection. Sending password as you suggested is extremely insecure.

---

Yeah. Don't do that. Either use HTTP Basic authentication, or pass an access token such as an OAuth token as a parameter, i.e.

http://www.example.com/api-version/end-point/?access_token=...