when using the

tap-rest-api-mdsk

what should I use as my auth method if I have a "/api/authenticate" endpoint that generates a token and then uses that token in the authorize under the header?

Sounds a bit like oauth2

Bearer token most likely if that is an option