So, actually you would need this:
(Check if you need the token Client or User, but it should be Client for Apps)