Sulu admin API token authentication scope for non-production testing
Sulu exposes admin API endpoints under /api/admin protected by the Symfony firewall named sulu_api. Authentication for these endpoints is documented via static API tokens created in the Sulu admin UI under Security → API Users, sent as a Bearer token in the Authorization header with stateless firewall handling. The goal is to validate an integration against