401Unauthorized "message": "incorrect user authorization"

If you’re using the Auth Code flow, did you exchange the code that is returned for an Access Token and Refreah token?