Making API requests to a 3rd party that requires authentication

Question

Here is my scenario. Imagine there is a Yoga studio that uses a professional booking and reservation system that exposes an API. Through this API an application can make a