As a gadget author I would like the user changing statements using the gadget to be authenticated so that they could be credited to the changes they make.
As a gadget author I would like the user changing statements using the gadget to be authorized so that the wiki's editing restrictions are not violated.

Bearer-token based authentication using Authorization HTTP header should be used.

The following requests should also authenticate and authorize the mediawiki user:
PATCH /entities/items/{item_id}/statements/{statement_id}
PATCH /statements/{statement_id}