Has anyone ever successfully hit the

https://{{account}}.<http://restlets.api.netsuite.com/rest/tokeninfo|restlets.api.netsuite.com/rest/tokeninfo>

endpoint. I can't figure out the auth header that needs to be provided

its the full TBA header

that's so confusing to me. I thought the whole point of this endpoint is reveal the role and user info data, but it looks like you have to know all of that info to actually hit the endpoint in the first place

the inputs to a TBA headers are the 4 tokens, and the account id

yeah fair