Authentication

It is done by API server using Tokens of Service Account
Or you can use Webhook Authentication