RESOLVED!!
It’s the session cookie from /api/admin/session and you provide it as header Cookie: with the cookie from /session
Cookie: ghost-admin-api-session=s%3AIuugUxUo[....]
Also needs Origin: header
Can not get Image Upload to authenticate
https://example.com/ghost/api/admin/images/upload/
When looking at the Dev console / Network, Ghost sends a cookie in header,
Cookie: ghost-admin-api-session=s%3ADy3gkfhPtZpLrYvcJnknlGwrjlzqrhee.eM45nt
the documentation says
"Authorization: Ghost $token"
How do I authenticate against this endpoint?
Which method is it?
Admin JWT Token or session Token from /api/admin/session?
Thank you for any guidance here
/magnus