The session creation used a slightly different consumerId than the one passed to the Vault component. Make the appId and consumerId identical in both places and the 401 goes away. If it persists, compare the two values character by character.

Context: GitHub issue on apideck-libraries/vault-core: following the React Vault guide, creating sessions via the SDK then rendering the Vault component returns 401 unauthorized responses.