Thank you, these tutorials cracked it for me. I had the JWT token in the header but I was missing the API key. For those reading this the API key is autogenerated under Apps and there you assign a role which you have previous created. The role gives access to the services and voila a perfectly firmed system for access rights.
↧