See the following topics:
Block Subscription to an APIPass a Custom Authorization Token to the Backend