400 Error Bad Request in update extension bits product

You shouldn’t be using the token from onAuthorized, the documentation states App Access Token associated with the Extension client ID. You should perform this request on your EBS using the Extensions App Access Token, not an Extension client.