In any case, the said credentials are valid for the company ID defined using apiserver.default_company
OK, so the company you're referring to is encoded in the authorization header
Also - did you start with a fresh DB after changing the default company value?
No, I just restart the apiserver and webserver pod.
What server are you using? a locally-installed server?