diff --git a/frontend/modules/api/controllers/ApiController.php b/frontend/modules/api/controllers/ApiController.php
index d38d2b7..48c39e4 100644
--- a/frontend/modules/api/controllers/ApiController.php
+++ b/frontend/modules/api/controllers/ApiController.php
@@ -58,7 +58,8 @@ class ApiController extends Controller
                         'Authorization',
                         'X-Requested-With'
                     ],
-                    'Access-Control-Allow-Methods' => ['*'],
+                    'Access-Control-Allow-Methods' => ['POST', 'GET', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
+                    'Access-Control-Request-Method' => ['POST', 'GET', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
                 ]
             ],
             'authenticator' => [