Thanks for pointing out I could see the un-sanitized header by using the Preview function. I was going crazy that I couldn't see it when actually running the request!
As suspected, the magic keyword of OAUTH2_TOKEN is not being replaced:"Authorization": "Bearer OAUTH2_TOKEN"
@Retool team, is this a bug?
"headers": {
"User-Agent": "Retool/2.0 (+https://docs.tryretool.com/docs/apis)",
"Authorization": "Bearer OAUTH2_TOKEN",
"ot-baggage-requestId": "undefined",
"x-datadog-trace-id": "4091177160949669678",
"x-datadog-parent-id": "5227738462811290591",
"x-datadog-sampling-priority": "-1",
"traceparent": "00-000000000000000038c6c7f3af989f2e-488ca86f26837bdf-00",
"tracestate": "dd=s:-1",
"X-Retool-Forwarded-For": "108.228.69.57"
}