Why CORS in Express allowing all requests although I alllowed only GET in allowed method

Question

I am learning to implement API using Node.js, Express and MongoDB. I am on early learning phase. I have added cors package using npm i cors to the project. And