Tapir: Default CORS settings leave PATCH out, so browsers block PATCH requests
Fixed · low · API-contract bug
If the default CORS interceptor runs, browser preflight for PATCH fails with no Access-Control-Allow-Methods header, so the request never reaches the route. Add PATCH to the allowed methods as a workaround.
Found: ; reported: ; status since: . Reporter: Mike Murunov
Page for this report · Public report · Fix or proposed fix (see status)
Thanks for the report - PRs welcome!