Hi, whats the correct way to call an API from lets say Postman. If i understand correctly, i need to use rid header with emailpassword value(im using emailpassword auth) and Authorization Bearer sAccessToken? Or do i explicitly need to call the signin endpoint first and then use the cookie value? Is it not possible to login on the browser, and then just use the accessToken in request?

Hi @JustDante, Refer to this page: https://supertokens.com/docs/emailpassword/testing/testing-with-postman

Yeah already looked at it, but i see only one case - using signin endpoint first and then using cookie value on another requests.

The API uses cookies and not headers so no that would not be possible

Oh okay, thanks