diff --git a/src/api.rs b/src/api.rs
index 03f700d..b00cf7e 100644
--- a/src/api.rs
+++ b/src/api.rs
@@ -19,6 +19,10 @@ async fn api_ticket(id: web::Path<i32>) -> impl Responder {
         .insert_header(("Access-Control-Allow-Origin", "*"))
         .insert_header(("content-type", "text/plain"))
         .insert_header(("content-encoded", "gzip"))
+        .insert_header((
+            "Access-Control-Allow-Headers",
+            "Content-Type, Content-Length, User-Agent, X-Requested-With, Range, DNT ",
+        ))
         .body(format!(
             "Ticket ID: {}, Ticket Price: {}, Ticket Status: {}",
             fetched_ticket_data.id, fetched_ticket_data.category, fetched_ticket_data.description
@@ -35,6 +39,10 @@ async fn api_admin(id: web::Path<i32>) -> impl Responder {
         .insert_header(("Access-Control-Allow-Origin", "*"))
         .insert_header(("content-type", "text/plain"))
         .insert_header(("content-encoded", "gzip"))
+        .insert_header((
+            "Access-Control-Allow-Headers",
+            "Content-Type, Content-Length, User-Agent, X-Requested-With, Range, DNT ",
+        ))
         .body(format!(
             "Admin ID: {}, Admin Name: {}, Admin Email: {}",
             fetched_admin_data.id, fetched_admin_data.name, fetched_admin_data.address
@@ -50,6 +58,10 @@ async fn api_driver(id: web::Path<i32>) -> impl Responder {
         .insert_header(("Access-Control-Allow-Origin", "*"))
         .insert_header(("content-type", "text/plain"))
         .insert_header(("content-encoded", "gzip"))
+        .insert_header((
+            "Access-Control-Allow-Headers",
+            "Content-Type, Content-Length, User-Agent, X-Requested-With, Range, DNT ",
+        ))
         .body(format!(
             "Driver ID: {}, Driver Name: {}, Driver Email: {}",
             fetched_driver_data.id, fetched_driver_data.name, fetched_driver_data.address
@@ -60,6 +72,11 @@ async fn api_test() -> impl Responder {
     HttpResponse::Ok()
         .content_type(ContentType::plaintext())
         .insert_header(("Access-Control-Allow-Origin", "*"))
+        .insert_header(("Access-Control-Allow-Methods", "GET"))
+        .insert_header((
+            "Access-Control-Allow-Headers",
+            "Content-Type, Content-Length, User-Agent, X-Requested-With, Range, DNT ",
+        ))
         .insert_header(("content-type", "text/plain"))
         .insert_header(("content-encoded", "gzip"))
         .body("My balls are on fire :(")