Authentication is covered here
There are two types of user token and one type of server to server token.
You need to determine which kind of token you want and go from there.
The token type (user/server) is often dictated by the API you wish to call.
A broadcasters subscribers will need a user token of the broadcaster
A stream status will take any kind of token