Invalid OAuth in game - works when testing in Postman

What is the body of the response.

HTTP code is half the information.