It requires an App Access Token, a Client-ID alone isn’t sufficient (the example is pretty bad in not showing this)