With reference to this document
Specifically the commit request:
curl https://api.bitbucket.org/2.0/repositories/username/slug/src \
-F /repo/path/to/image.png=@image.pngI don't see how this request is authenticated, there is no password or personal access token used.