I had to assign the use editorial transition publish permission to the user role that the OAuth2 client uses.
(HTTP status code for the response was "403 Forbidden")