You must pass LSD Token value first to execute any API call

[tanu360]

1. First, send a GET request to the URL and read the page source to get LSD Value.
2. Regex : /"LSD",[],{"token":"([^"]+)"}/
3. Now pass the LSD value in the header and POST Requests params as x-fb-lsd and lsd respectively.
4. It will work now.

[RemmyLee]

Can confirm. While stripping down headers, lsd was one of the few that was absolutely required.