Thank you very much for the quick reply, but I am a little surprised.
We do not use our own web API but a publicly available one:
More and more web APIs seem to be using this authentication method.
I found the following forum post, which apparently suggests a not easy but feasible solution in Thunkable.
Unfortunately, the app link is not available. For us, a more complex solution would also be welcome…