It's a GET request with an auth token passed as a query parameter.