Keep getting "Forbidden" status trying to call the API

API
9

Step 1:

GET https://id.twitch.tv/oauth2/authorize

    ?client_id=<client_id>

    &redirect_uri=http://localhost

    &response_type=code

    &scope=moderation:read

Step 2:

POST https://id.twitch.tv/oauth2/token
    ?client_id=<client_id>
    &client_secret=<client_secret>
    &code=<code>
    &grant_type=authorization_code
    &redirect_uri=http://localhost

Step 3:

POST https://api.twitch.tv/helix/moderation/enforcements/status?broadcaster_id=<broadcaster_id> HTTP/1.1
Authorization: Bearer <access_token>
Client-id: <client_id>
Content-Type: application/json

{
  "data": [
    {
      "msg_id": "someid",
      "msg_text": "there was a time",
      "user_id": "some_user_id"
    }
  ]
}