...
The access token must be passed to the API in the Authorization header, e.g.:
GET ${ARCHIE_HOSTNAME}/authrest/realms/master/protocol/openid-connect/token reviews/CD000004 HTTP/1.1
Authorization: Bearer 3e8ec1a3d43c983b57df0616b498c04807b466e919999aa0f3f3aabca1dd48cc
...