Authentication takes the bundle identifier as the username and your API Client key as the password for HTTP Basic Authentication.
For testing in the browser you can use the built-in browser dialog box which will prompt you for these credentials when you first make a request against the API
API Clients can be registered through the Carnival Mobile Platform, and can have either or both of these permissions:
If you send a request to an API endpoint the API Client key doesn't have permissions for, you will receive a 403 HTTP Response code.
If the optional time parameters aren't set, then it will default to a month window