As a prerequisite to the use cases, it is assumed that the authentication header is defined and working.
Otherwise, read Authentication and Authorization for clarification or Example – Authentication for a concrete example.