Hi @Lê Văn Hào
According to your screenshot, there is nothing wrong with the way you requested it, the problem should be with the endpoint you subscribed to, and your notification endpoint must be able to validate the request accordingly and return the authentication token in plain text.
If your subscription endpoint is not validated correctly, 400 error requests will occur.
Please refer to this link for more details:
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.