Request token on API using Laravel Passport

I am creating a login feature using Laravel Passport. Can I use auth()->id() without sending the bearer token on the Authorization header? If I put the token on header everyone can see it on the browser Network and it is not safe what is the other option?

This is my login controller API

    public function login(Request $request)
    {
        $data = [
            'email' => $request->email,
            'password' => $request->password
        ];

        if (auth()->attempt($data)) {
            $token = auth()->user()->createToken('WebAppToken')->accessToken;
            return response()->json([
                'token' => $token
            ], 200);
        } else {
            return response()->json(['error' => 'Unauthorized'], 401);
        }
    }

This is my userInfo controller API

    public function userInfo()
    {
        $user = User::where('id', auth()->id())->first();

        return response()->json([
            'user' => $user
        ], 200);
    }