The Access-Control-Request-Method request header is used by browsers when issuing a preflight request, to let the server know which HTTP method will be used when the actual request is made. This header is necessary as the preflight request is always an OPTIONS and doesn't use the same method as the actual request.
| Header type | Request header |
|---|---|
| Forbidden header name | yes |
Access-Control-Request-Method: <method>
One of the HTTP request methods, for example GET, POST, or DELETE.
Access-Control-Request-Method: POST
| Specification |
|---|
| Fetch Standard # http-access-control-request-method |
| Desktop | Mobile | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Chrome | Edge | Firefox | Internet Explorer | Opera | Safari | WebView Android | Chrome Android | Firefox for Android | Opera Android | Safari on IOS | Samsung Internet | |
Access-Control-Request-Method |
4 |
12 |
3.5 |
10 |
12 |
4 |
2 |
Yes |
4 |
12 |
3.2 |
Yes |
© 2005–2022 MDN contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Request-Method