diff --git a/api/src/middleware/cors.ts b/api/src/middleware/cors.ts
index 6bfbb6d..dedde0c 100644
--- a/api/src/middleware/cors.ts
+++ b/api/src/middleware/cors.ts
@@ -33,7 +33,7 @@ export const corsMiddleware = cors({
     if (isDev && /^http:\/\/192\.168\./.test(origin)) { cb(null, true); return; }
     cb(new Error(`Origin ${origin} not allowed by CORS`));
   },
-  methods: ["GET", "POST", "PATCH", "OPTIONS"],
+  methods: ["GET", "POST", "PUT", "PATCH", "OPTIONS"],
   allowedHeaders: ["Content-Type", "Authorization"],
   exposedHeaders: ["RateLimit-Limit", "RateLimit-Remaining", "RateLimit-Reset"],
   credentials: true,