This would need deeper investigation of the actual system, but my first guess would be authentication.
If the request works through PostMan (or even directly in a browser), it indicates that on our side everything is in order and the problem is on the other end...

p.s. I would also strongly suggest switching to https, if possible.