Authorization is made by including the header Authorization in the API request.

The value should be “Bearer” and an active Access-Token for the user.

For requests where the content is a file, like in archive or inbox, a special content-type is used, this type is multipart/form-data. The header field “accept” should still be JSON, this specifies in which format you want the return data to be in.

This is an example of how the header could look with all the header fields filled in correctly.

Authorization: Bearer {Access-Token}
Accept: application/json
Content-Type: application/json