I think for public Javascript clients, admin api is not allowed (sadly, this complicates everything, I know!) But you’re going to have to use User API keys specification instead.
For me, I’m still trying to figure out how as well. I just want to pull a .json response that’s publicly available.