Some potential debugging steps…
When you test this call elsewhere (like Postman) is is working?
If you hardcode all the information for the authorization, is it working?
I suspect like J.D said in their comment that it’s something in the passing of the auth, but you will want to narrow down for sure that the call is even working at all first