I managed to solve this issue by updating the CORS parameters using:
CORS(app, origins="*", allow_headers=["Content-Type", "Authorization"], expose_headers="Authorization")