Notify.ios Attatchment url authentication

I’m trying to figure out how to not use the legacy api password when sending notifications to ios-devices with an url to home assistant.

Can anyone give an example how to use a long-lived access token in the url?
Before I used ?api_password=secretpassword in the url but I would like to disable the legacy password and use tokens instead.

- service: notify.ios_iphonex
  data:
    message: "Movement."
    data:
      attachment:
        url: !secret cam_backdoor_vid
        content-type: mpeg4
        hide-thumbnail: false