Getting 400 error when trying to refresh a token (client secret missing)

Thanks for your reply @BarryCarlyon!
Unfortunately omitting the header makes things worse: {“status”:400,“message”:“missing client id”}