Access-Control-Allow-Methods

The methods allowed for a cross-origin request, sent in answer to a preflight.

Header name, or pasted headers

Explained

Examples

Example

Access-Control-Allow-Methods: GET, POST, PUT, DELETE

It only matters on the OPTIONS preflight response. GET, HEAD and POST with simple content types skip the preflight.

Defined in Fetch standard, CORS protocol.