My problem is solved but if someone can explain it would be great.
I was having cors issue but only in incognito mode or on others computer.
I found out that a slash was causing the issue.
I put for example https://myUrl/download/?path= instead of https://myUrl/download?path=.
The additional slash after download was causing cors issue.
Could someone explain why my code was working only on my computer if I'm not in incognito mode ?