From 90b0613182f90d49931626323974804471ffbbb8 Mon Sep 17 00:00:00 2001
From: Roman Khimov <roman@nspcc.ru>
Date: Fri, 30 Apr 2021 13:41:45 +0300
Subject: [PATCH] README: add something about bearer tokens

---
 README.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/README.md b/README.md
index 79a387a..bd8105c 100644
--- a/README.md
+++ b/README.md
@@ -265,6 +265,16 @@ object ID, like this:
 }
 ```
 
+#### Authentication
+
+You can always upload files to public containers (open for anyone to put
+objects into), but for restricted containers you need to use bearer tokens
+(which basically is an owner-signed ACL data, refer to NeoFS documentation for
+more details). There are two options to pass them to gateway:
+ * "Authorization" header with "Bearer" type and base64-encoded token in
+   credentials field
+ * "__context_bearer_token_key" cookie with base64-encoded token contents
+
 ### Metrics and Pprof
 
 If enabled, Prometheus metrics are available at `/metrics/` path and Pprof at