Instead of core/duplicate request you can use combination of this one and core/use_auth_hash. To create an authorization hash, use the command core/create_auth_hash:

svc=core/create_auth_hash&params={}

 Generated hash is valid from creation moment to first usage during 2 minutes!

{
	"authHash":<text> 	/* authorization hash value */
}