if you use authentification ,just check your middleware , you probably protected some pages , you should make the path '/api/uploadthing' public so uploadthing can use it