Authorization

Permissions

All API endpoint(except index) require a staff user's token on the header.

Authorization: Token {your_token}

Token Endpoint

Client could retrieve the token from POST /auth endpoint.

Client should include body(username and password) on request to retrieve the token.