An apps client secret isn’t an OAuth token.
You should follow the Authentication Docs to learn about how you can create an OAuth token. The docs walk you through creating the app, what the different OAuth flows are, and a step by step process for each of those flows.
Once you’ve got an Access Token from one of those OAuth flows, that is what you will use in the Authorization header.