In each API request, you’ll need to make sure you’ve configured the appropriate headers and/or params. The tool will set good defaults for you, esp for auth types with strong conventions like OAuth2, but this is the first thing I’d confirm if you’re not seeing what you expect on the server side.

I’d also confirm that you really have an access_token in your authData object at the end of your authentication. Perhaps add some z.console.log statements to check, and a properly designed auth test request configuration should exercise your authorization mechanism to confirm everything is in place before allowing the user to move forward in Zap setup.