Javascript Mendeley JS SDK客户端凭据流授权

我正在使用Mendeley Javascript SDK构建SPFX SharePoint online Web部件，并尝试客户端凭据流授权。我得到了CORS错误： CORS策略已阻止从源“”访问“”处的XMLHttpRequest:请求的资源上不存在“访问控制允许源”标头*/

private clientCredentialsFlow() {
    var sdk = mendeley;
    var api = sdk({
        authFlow: sdk.Auth.clientCredentialsFlow({
        clientId: 1234,
        clientSecret: 'abcdefghijk',
        redirectUri: 'https://xyz.sharepoint.com/_layouts/15/workbench.aspx'
      })
    });