Hello,
We had a few users reporting this and it turned out to be an issue with their network policy. It was filtering the request and removing the ADO token that is passed as a header.
Those use ZScaler. Do you use ZScaler or a similar network filtering solution?
To confirm, can you try outside of your corporate network to validate that this is the problem?
Regards,
Antoine