API Testing · Middle · Question 71 of 75

What does `405 Method Not Allowed` require from the server?

1A body containing the full API specification
2An Allow header listing the supported methods
3A redirect to the endpoint's documentation

Show the answer

Correct answer: An Allow header listing the supported methods

Explanation

Testers send unsupported methods (e.g. DELETE on a read-only endpoint) and check 405 with Allow, not 404 or 500.

Further reading

Test yourself

Take the API Testing · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.