((p "The " (a (@ (href . "00001012050200")) "authentication process") " provides you with an " (a (@ (href . "00001012921000")) "access token") "." " " "Most API calls need such an access token, so that they know the identity of the caller.") (p "You send the access token in the " (@L (@H "“") "Authorization" (@H "”")) " request header field, as described in " (a (@ (href . "https://tools.ietf.org/html/rfc6750#section-2.1") (rel . "external")) "RFC 6750, section 2.1") "." " " "You need to use the " (@L (@H "“") "Bearer" (@H "”")) " authentication scheme to transmit the access token.") (p "For example (in plain text HTTP):") (pre (code "GET /z HTTP/1.0\nAuthorization: Bearer eyJhbGciOiJIUzUxMiJ9.eyJfdGsiOjEsImV4cCI6MTYwMTczMTI3NSwiaWF0IjoxNjAxNzMwNjc1LCJzdWIiOiJhYmMiLCJ6aWQiOiIyMDIwMTAwMzE1MDEwMCJ9.ekhXkvn146P2bMKFQcU-bNlvgbeO6sS39hs6U5EKfjIqnSInkuHYjYAIfUqf_clYRfr6YBlX5izii8XfxV8jhg")) (p "Note, that there is exactly one space character (" (@L (@H "“") (kbd "␣") (@H "”")) ", U+0020) between the string " (@L (@H "“") "Bearer" (@H "”")) " and the access token: " (code "Authorization:␣Bearer␣eyJhbGciOiJIUzUxMiJ9.ey...") ".") (p "If you use the " (a (@ (href . "https://curl.haxx.se/") (rel . "external")) "curl") " tool, you can use the " (kbd "-H") " command line parameter to set this header field."))