"invalid credentials" calling userinfo

Hmmm yes that is not correct, it shouldn’t be the client id, it should be the API identifier.

Can you DM me a HAR of the request?