>>347203240
I'd recommend opening up your browser dev tools on vrchat.com, looking for the request to vrchat.com/user, and clicking "copy as cURL", which will have the Authorization header properly formatted for you. It'll also have the session cookie which is a better way to make api requests since each login with user/pass creates a new session and you'll eventually get a "too many sessions" error after ~100 requests or so.

https://vrchatapi.github.io/#/GettingStarted/QuickStart?id=authorization has more details.