diff --git a/default.conf b/default.conf
index 11d357a..234c02b 100644
--- a/default.conf
+++ b/default.conf
@@ -123,7 +123,8 @@ server {
     if ($request_method = OPTIONS) {
     add_header Access-Control-Allow-Origin $http_origin always;
     add_header Access-Control-Allow-Credentials true always;
-    add_header Access-Control-Allow-Headers content-type always;
+    add_header Access-Control-Allow-Headers content-type,authorization always;
+    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
       return 200;
     }
     add_header Access-Control-Allow-Origin $http_origin always;