// http header · cors header
Access-Control-Allow-Methods
Methods allowed for the resource
What the Access-Control-Allow-Methods header does
Access-Control-Allow-Methods lists the HTTP methods permitted for a cross-origin resource. It's returned in the preflight (OPTIONS) response so the browser knows whether the real request's method is allowed.
Example
Access-Control-Allow-Methods: GET, POSTWhere it's used
Access-Control-Allow-Methods is a cors header. CORS headers govern cross-origin requests — which other origins may read a response.
Other cors headers
Access-Control-Allow-Origin Access-Control-Allow-Methods Access-Control-Allow-Headers Access-Control-Allow-Credentials Access-Control-Max-Age