Trying to validate the access token from an implicit grant flow in a React app. The token decodes fine locally, but calling /api/v2/authorization/user/me returns a 401 Unauthorized. The payload structure looks standard.
const res = await fetch('https://api.mypurecloud.com/api/v2/authorization/user/me', {
headers: { 'Authorization': `Bearer ${token}` }
});
Token has the right scopes. Is there a specific header missing?