Authenticating the request will be dependent of the configured authentication chain. Default authentication mode for API calls is Basic authentication.
See Authentication and User Management for a comprehensive view of authentication possibilities with Nuxeo Platform. Also, you should pay attention that by default, the authentication chain used for API calls is contributed via a specific endpoint (and even another one for command calls specifically).