mirror of
https://github.com/zulip/zulip.git
synced 2025-10-24 16:43:57 +00:00
While the Tornado server supports POST requests, those are only used by internal endpoints. We only support OPTIONS, GET, and DELETE methods from clients, so filter everything else out at the nginx level. We set `Accepts` header on both `OPTIONS` requests and 405 responses, and the CORS headers on `OPTIONS` requests.