CORS · Response header
Access-Control-Allow-Methods
Which HTTP methods are allowed on the cross-origin resource.
What is Access-Control-Allow-Methods?
Sent in response to a CORS preflight (OPTIONS request) to indicate which methods the actual request may use.
Typical usage
Set on OPTIONS preflight responses.
Examples
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONSSpecification
Fetch Standard §CORS
Related headers
Access-Control-Allow-Origin
Which origins may read this response cross-origin.
Access-Control-Allow-Headers
Which request headers may be used in the actual cross-origin request.
Access-Control-Allow-Credentials
Whether cookies and Authorization can be sent cross-origin.
Access-Control-Max-Age
How long the browser may cache the preflight response.
Origin
The origin (scheme + host + port) of the request.