Answer
A 401 with Basic auth against a specific projection is very commonly caused by that projection not having been added to Compatibility Application Type yet — this is a required configuration step to expose a given projection for this kind of Basic-auth REST access, and without it you'll get a 401 regardless of how correct your credentials are. Both authentication approaches are genuinely supported — Basic auth (once the projection is properly configured for compatibility access) and OAuth2/OpenID Connect (the more modern, recommended approach) — so check the Compatibility Application Type configuration for the specific projection you're calling before assuming OAuth2 is mandatory.