title: Cross-Origin PATCH and DELETE requests blocked by Spring Boot application, but not GET requests
body: <p>I have the below security configuration in my Spring-Boot app at the moment. This is the standard stuff I've found online to allow all CORs requests (there are a lot of other configurations online that I've also tried).</p>
  <p>These work fine for GET requests, however PATCH and DELETE requests are still being blocked due to CORs policy. Has anyone experienced this before?</p>
  <pre><code>@EnableWebSecurity
  public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http.cors().configurationSource(request -&gt; new CorsConfiguration().applyPermitDefaultValues());
      }
  }
  </code></pre>