function getSession() {
		var str = '{ ';
		str += '"FolderId": "de16a65c-e70f-4715-93fe-ae6d012f5928" ';
		str += '}';
		var URL = 'https://avenues.hosted.panopto.com/Panopto/PublicAPI/Rest/sessionUpload';

		$.ajax({
			type: 'POST',
			url: URL,
			headers: { 'Authorization': "Bearer " + accessToken },
			xhrFields: { withCredentials: true },
			crossDomain: true,
			contentType: 'application/json',
			data: str,
			success: function (data, status) { getSessionReturn(data, status); }
		});
	}

Request headers:

OPTIONS /Panopto/PublicAPI/Rest/sessionUpload HTTP/2
Host: avenues.hosted.panopto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: http://localhost/
Origin: http://localhost
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

Response headers:

HTTP/2 200 OK
date: Thu, 28 Apr 2022 20:17:26 GMT
content-length: 0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-origin: https://avenues.hosted.panopto.com
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-max-age: 1728000
access-control-allow-headers: Content-Type, Accept, X-Csrf-Token, authorization, SOAPAction
p3p: CP="Some Browsers Require This In Order to Set Third Party Cookies"
X-Firefox-Spdy: h2