Terraform gen oauth client scope check failing

Configuration is broken for some reason… i am trying to list all oauth clients in an org and check their scope assignments programmatically using the genesys cloud terraform provider. i use a data source but it returns empty. the api call to /api/v2/authorization/oauth2-clients works in postman with 200 ok but in terraform it fails with 403 forbidden. how do i handle the auth token correctly in the provider block for this specific endpoint?