Safe and idempotent
OPTIONS HTTP Method
OPTIONS requests ask which communication options are available.
Meaning
The client asks what communication options are available for the target resource or server.
Common uses
Use OPTIONS to discover allowed methods, CORS preflight behavior, or server capabilities.
What to check
Check Allow and CORS headers, especially Access-Control-Allow-Methods for browser preflight requests.
Example request
OPTIONS /articles/123 HTTP/1.1
Host: example.comProperties
- Safe
- Yes. A safe method is intended only to read data.
- Idempotent
- Yes. Repeating the same request should have the same intended effect.
- Cacheable
- No
- Request body
- Usually no
References
- Registry
- IANA HTTP Method Registry
- Guide
- MDN OPTIONS