This post goes over some of the reasons you might be seeing a 403 Forbidden.
If this doesn’t help to solve it, can you please provide an example of the outgoing request and response you are seeing? Sometimes there is more information with the response that could help to debug.