Hey @fow,
Make sure you are setting the API Key and Secret as the Basic auth header when doing the OAuth flow.
Yes, when using JWT Tokens, it is best to generate the token each time you make a request.
Thanks, Tommy