Add a permission model to appsettings.json that controls which HTTP methods (GET, POST, PUT, DELETE, PATCH) are allowed for each key. By default, all methods are allowed, but permissions can be explicitly set to true or false per method. This requ...