If I understand it correctly, you need to retrieve the account which is consuming the REST service or which is used for the authentication of the REST service.
There is no need to retrieve the account information from the authorization header, you can directly retrieve the current account in the microflow, in this case it should return you the account which is using the underlying microflow on the REST service.