How to authenticate request made from custom plugin?

I don’t think they are documented, yet, except in the code on GitHub.