Struggling with the same. This might be the cause:

"If your application runs client side, then it will be the users IP that is trying to connect to the backend service, not your app service, and so you will need to grant them access." https://learn.microsoft.com/en-us/answers/questions/1340630/got-403-ip-forbidden-requesting-backend-app-servic