401 oauth token is missing

No an app access token is NOT the client secret.

Covers how to get an App Access aka Client Credentials token.