fetchIdToken() always returning 403 when used in Authorization header

[leo-paz]

I am trying to use the standard fetch client instead of the Gaxios client that the IdTokenClient class uses because it was giving me trouble whenever I used with multiple files in the FormData class.

Originally I had a very simple client running under my service account credentials and properly being authenticated with this code:

  const client = await auth.getIdTokenClient(url.origin);
  const res = await client.request({url + "/general/v0/general"});

now I am trying:

      const idTokenClient = await googleAuth.getIdTokenClient(url.origin)
      const idToken = await idTokenClient.idTokenProvider.fetchIdToken(
        url.origin
      )
      const response = await fetch(url.toString(), {
        method: "POST",
        headers: {
          Accept: "application/json",
          Authorization: `Bearer ${idToken}`
          // "X-Serverless-Authorization": `Bearer ${idToken}`
        },
        body: formData
      })

But I consistently get a 403. What am I doing wrong?

[leo-paz]

I'm not sure what the error was. I reapplied some IAM policies and restarting my service and things starting working