diff --git a/routes.php b/routes.php
index 810eb3c6..1f30629b 100644
--- a/routes.php
+++ b/routes.php
@@ -262,8 +262,8 @@ $app->group('/api', function(RouteCollectorProxy $group)
 		$group->post('/uploadjson', '\Grocy\Controllers\StockApiController:UploadJson');
 	}
 })->add(new CorsMiddleware([
-	'origin' => ["*"],
-	'methods' => ["GET", "POST"],
+	'origin' => ['*'],
+	'methods' => ['GET', 'POST', 'PUT', 'DELETE'],
 	'headers.allow' => [ $container->get('ApiKeyHeaderName') ],
 	'headers.expose' => [ ],
 	'credentials' => false,