If you are new to this, you should first check out the getting started guide for authentication.
All requests that require normal authentication require the Authorization header with the access token, like bearer {accessToken}.
Web APIs however are a bit different, these require web login cookies.
Checkout the Contribution Info