# PUT DELETE method get "not supported" when using -api rest

**URL:** <https://forum.flowable.org/t/put-delete-method-get-not-supported-when-using-api-rest/3664>\
**Category:** Flowable Engine\
**Created:** [April 2, 2019, 9:57am UTC](https://forum.flowable.org/t/put-delete-method-get-not-supported-when-using-api-rest/3664 "2019-04-02T09:57:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hmsypzou](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@hmsypzou](https://forum.flowable.org/u/hmsypzou)\
**Post date:** [April 2, 2019, 9:57am UTC](https://forum.flowable.org/t/put-delete-method-get-not-supported-when-using-api-rest/3664/1 "2019-04-02T09:57:24Z")

</div>

I just follow filiphr’s tutorial [https://blog.flowable.org/2018/12/19/building-your-own-flowable-spring-boot-application/](https://blog.flowable.org/2018/12/19/building-your-own-flowable-spring-boot-application/) using exactly same security configuration.

After running the Spring Boot project and testing flowable-rest api, I found the GET POST method working fine while PUT and DELETE method such as "PUT repository/process-definitions/{processDefinitionId} " got “org.springframework.web.HttpRequestMethodNotSupportedException: Request method ‘DELETE’ not supported”

can any one gives me a clue? In filiphr’s example the csrf is disabled, whether this is about embedded tomcat configuration? I have no idea

I am using “flowfest-rest” user with privilege “ROLE\_REST” just follow the example

---

<div class="post-metadata">

**Author:** ![hmsypzou](https://avatars.discourse-cdn.com/v4/letter/h/c89c15/32.png) [@hmsypzou](https://forum.flowable.org/u/hmsypzou)\
**Post date:** [April 3, 2019, 2:14am UTC](https://forum.flowable.org/t/put-delete-method-get-not-supported-when-using-api-rest/3664/2 "2019-04-03T02:14:28Z")

</div>

I comment spring-security in pom and the rest-api are now avaliable. But still confused why the security configuration in the tutorial disabled PUT and DELETE method

---

<div class="post-metadata">

**Author:** ![filiphr](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/filiphr/32/315_2.png) [@filiphr](https://forum.flowable.org/u/filiphr)\
**Post date:** [April 3, 2019, 6:14am UTC](https://forum.flowable.org/t/put-delete-method-get-not-supported-when-using-api-rest/3664/3 "2019-04-03T06:14:24Z")

</div>

Hey @hmsypzou,

The security configuration in the tutorial is not disabling `PUT` and `DELETE`. The reason why you are getting that exception is because there is no `PUT` and `DELETE` methods for that endpoint (`repository/process-definitions/{processDefinitionId}`).

The exception

```auto
org.springframework.web.HttpRequestMethodNotSupportedException: Request method ‘DELETE’ not supported

```

does not come from spring-security, but from spring-web.

Cheers,  
Filip