# Bearer Token

**Use API keys** if you expect developers to build internal applications that don’t need to access more than a single user’s data.

![](https://3448227606-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LQ08RFAKZvFADEiXKFy%2F-MEEy8r9TeZrjti2WcdH%2F-MEF1GgGDCjOsB9PWD3n%2Fimage.png?alt=media\&token=3699ee28-94ec-43ef-bd9b-607999624f94)

**Bearer authentication** is an authentication scheme that involves security tokens called bearer tokens. The name “Bearer authentication” can be understood as “give access to the bearer of this token.” The bearer token is a cryptic string, usually generated by the server in response to a login request. The client must send this token in the `Authorization` header when making requests to protected resources:

```
Authorization: Bearer {{token}}
```

Adding an API that uses a bearer token authentication scheme is easy in Jet Admin. Just add it as a global header in the Resource configuration screen and all your API requests that use the resource will have the right auth headers sent over.

![](https://3448227606-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LQ08RFAKZvFADEiXKFy%2F-MjZ3LfsU1ZReomd0nUz%2F-MjZ_nIkIcf5Ot0SAQXu%2Fimage.png?alt=media\&token=161cafe5-09c1-4e93-bf20-44a9a7e28326)

{% content-ref url="../../data/make-an-http-request" %}
[make-an-http-request](https://docs.jetadmin.io/user-guide/data/make-an-http-request)
{% endcontent-ref %}
