Basic auth sending user and password, also a custom header x-api-key with your api key is required.

After log in, all endpoints will only need the retrieved JWT token, sent as an Authorization: "Bearer {{jwt}}" header