diff --git a/api/server/gin_middlewares.go b/api/server/gin_middlewares.go
index a0309dd84..c2e51577d 100644
--- a/api/server/gin_middlewares.go
+++ b/api/server/gin_middlewares.go
@@ -39,6 +39,8 @@ func optionalCorsWrap(r *gin.Engine) {
 			corsConfig.AllowHeaders = headers
 		}
 
+		corsConfig.AllowMethods = []string{"GET", "POST", "PUT", "HEAD", "DELETE"}
+
 		logrus.Infof("CORS enabled for domains: %s", origins)
 
 		r.Use(cors.New(corsConfig))