[samtheprogram]

…you can see what auth/headers are passed to the endpoint from said developer tools.

I agree with sibling commenters that automating the browser with DOM APIs is an easier route to go though.