It looks like you may be missing cookies? You probably need to add a jar to your request session.
Might help to reference the uploads tests: https://github.com/NodeBB/NodeBB/blob/master/test/uploads.js
I installed the write-api plugin, created a master token and I am able to access the usual suspects such as
/api/topics via the read-api.
However, I cannot access backend url's:
% curl -H "Authorization: Bearer $token" "https://www.foo.bar/api/admin/manage/privileges/?_uid=1" "not-authorized"
If I access this url via chrome (once logged in into the admin backend), I get JSON output as expected.
Is this unsupported or am I doing something wrong?