POST /api/v1/bean/requestContent-Type: application/jsonLang-Context: enSite-Context: my-siteAuthorization: Bearer <token>
Send Lang-Context and Site-Context with every request. For protected methods, send the JWT in the Authorization header as Bearer <token>.Access: ADMIN. Bearer Token: conditional for USER/ADMIN.
GUEST — unauthenticated users; only whitelist services are available.
USER — authentication is required; methods with USER checks are available.
ADMIN — full access to public methods of all services.
If a method checks a role internally, GUEST may receive null.