Webservice Authentication

[vanessa_adabra]

I have come across an odd behaviour of PS when interrogating the following endpoint: https://TOKEN@SHOP-URL/api. The behaviour comes off as odd to me because I cannot find a reason for it to happen in the documentation.

Basically, if I make a GET request with my personal shop (merely used for testing and which current version is 1.7.6.5) the call returns the correct information. If I make the same request with my end-client token and shop url the request returns nothing else than 401 unauthorized.

What I found out is that if I use this endpoint on the browser I am required to login and therefore I looked for alternatives and I have come across this endpoint alternative format which works for both shops: http://SHOP-URL/api/?ws_key=TOKEN on postman. The issue is that I have not fully understood if this way of setting the key is deprecated and why this is the only way I can get this info for both shops.

My questions are the following:
Is the reason the prestashop store version? Is the param ws_key=TOKEN deprecated?

Thank you for your time.