How to generate the WSEE authentication headers for the Web API?

You should implement the same algorithm as the oro:wsse:generate-header console command.

orocrm.com/documentation/2.0/cookbook/how-to-use-wsse-authentication#header-generation

See also: