How to enable DELETE request?

Question

I'm not able to allow the DELETE request from my API server due to CORS.

server.js

// enable CORS
app.use(function (req, res, next) {
    res.header("Access-Control-Allow-Origin", "*");
    res.header("Access-Control-Allow-Methods", "GET", "PUT", "POST", "DELETE", "OPTIONS");
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Authorization");
    next();
});

I get a console error saying:

XMLHttpRequest cannot load http://localhost:8080/api/users/57f5036645c04700128d4ee0. Method DELETE is not allowed by Access-Control-Allow-Methods in preflight response

How can I enable DELETE requests, just like GET, PUT, and POST requests?

Answer 1

I solved it without adding new packages, just added this line

res.header("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE");

Notice that i have my allowed methods separated by commas inside one string. The complete function looks like this:

app.use(function (req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept, Authorization");
  next();
});