Get records with API object-based and user token

API & Customization
1

Trying to get records after logging the user in with the user token with:

var axios = require('axios'); 

var config = { 
method: 'get', 
url: 'https://XXX.knack.com/v1/objects', 
headers: { 
'X-Knack-Application-Id': 'XXXXXX', 
'Authorization': 'XXX.XXX.XXX'
} }; 

axios(config).then(
function (response) { 
 console.log(JSON.stringify(response.data)); 
}).catch(function (error) { 
 console.log(error);
});


This returns the first level of objects, however when I change the URL to:

https://XXX.knack.com/v1/objects/object_1

It returns:

Unauthorized Object Access

How I can receive the object/records with only user token and APP ID and not using API key?

2
Do it like this:
 
$.ajax({
url: rates_url,
type: 'GET',
headers: {
'Authorization': Knack.getUserToken(),
'X-Knack-Application-ID': Knack.application_id,
'Content-Type': 'application/json',
'Access-Control-Allow-Origin': 'https://api.knack.com'
}
})