Access-Control-Allow-Methods is not stopping POST call

Question

I made a simple web server on which I have set the Access-Control-Allow-Methods allow only GET and OPTIONS methods.

const http = require(\'http\'