It's depend on authentication type which was chosen on TV
This documentation partially describing it: https://pro-bravia.sony.net/develop/integrate/ip-control/index.html#ip-control-authentication
In total we have four types of Authentication:
- None - means you no need any auth processes or any auth params for remote access to Sony Bravia API
- Normal - the case which describes Antagonist here. You should send a “sony/accessControl” request with the method “actRegister”. The TV should show a four digit code, then you should send the same request using this code as the password of basic authentication (with empty username). TV response will have headers "Authorization" and "Cookie", you should use this headers in all you request for using Sony Bravia API
- Pre-Shared Key - when you choose this auth method in your Sony TV, you must enter a 4 digit number (on TV). All requests to Sony Bravia API should have header "X-Auth-PSK" with this code.
- Normal and Pre-Shared Key - you should use one of these types of authentication.
The different TV models have different auth types. But looks like all models have Pre-Shared Key or Normal and Pre-Shared Key auth type.