API documentation incomplete?

My version of HedgeDoc is: 1.9.7

I am attempting to migrate my notes from Google Keep to Hedgedoc, so I perused the API documentation. I think I might be missing something obvious, but I don’t see any specification for authentication

I can see from my web server logs that it’s doing a POST request to /login with application/x-www-form-urlencoded encoding. Is that it? Is there a token that I have to put in the headers of requests or something?

Anything else that I should be aware of when attempting to script the use of Hedgedoc’s API?