Getting “No 'Access-Control-Allow-Origin' header is present on the requested resource” when domain is allowed in React

Question

I have a React application that is running on my main site and an API that is on the same site, just using a subdomain.

The API is built using NodeJs and has been configu