A header with Content-Type and authorization bearer was missing. Once I did:
var headers = { 'Content-Type': 'application/json', Authorization: `Bearer ${window.localStorage.authToken}` }
and passed it like so:
axios.post(url, data, headers)
request.get_json()
worked.