Unfortunately, I think the endpoint is blocked by cors if you’re accessing it from the front-end from an outside source. It would work if it was a published build.
Also, have you tried the new SDK for file upload?? I’m going to try and implement it today so I can’t say for sure how it goes. Here’s the link to learn more about it just in case you didn’t know about it: