{ status: 400, message: 'Invalid authorization code' }

Broadly looks correct.

What does queryBuilder do?

Heres a simplier fetch example to reference