Authentication

Two headers are required:

Header	Required	Description
Authorization	Yes	Bearer {token}. token is shared by BE team as one time activity.
appKey	Yes	Partner SDK app key. Must be registered as group type MID_SDK.

appKey is further validated against the SDK registry. Apps not of type MID_SDK are rejected with 403.