Authorization Header
With each API call, a HTTP Authorization header bearing an OAuth 2.0 access-token must be included:
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUz…………………..
Any calls that do not send a valid Authorization header will return a HTTP Status code 401 (Not Authorized), indicating that the caller is not authenticated.