HTTP headers
Allow HTTP Header Meaning
Allow lists the HTTP methods supported by a resource.
Meaning
The server is stating which methods are permitted for the target resource.
Where it appears
Servers often send it with OPTIONS responses or 405 Method Not Allowed.
What to check
Check that it matches routing behavior and that unsupported methods return 405 consistently.
Example
Allow: GET, HEAD, OPTIONSReferences
- Registry
- IANA HTTP Field Name Registry
- Guide
- MDN Allow