Almost all API requires authentification. You need to get authentification token.
We use JSON Web Token (JWT) as container to pass access_token. JWT is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA.
Below you can find authentification flow:
For refreshing your token
Получение токена обновления
post
Вы должны установить токен в заголовок, и он проверяет токен и возвращает новый токен.