Authentication is done by logging into your WordPress admin and creating a token. The user token and secret key must be passed as a base64 encoded string. You may add security to your tokens by limiting allowed API requests in the token management area (WP EasyCart admin -> settings -> third party).