How do I override the Allow response from Apache 2.4.52

My vhost config:

<VirtualHost *:3000>
  ServerAdmin webmaster@localhost
  DocumentRoot "/var/www/bag-design/bag-design-web/build"
  DirectoryIndex index.html
  Header always set Access-Control-Allow-Origin "*"
  Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS, PATCH"
  Header always set Access-Control-Allow-Headers "*"

  <Directory "/var/www/bag-design/bag-design-web/build">
    AllowOverride All
    Order allow,deny
    Allow from All   
  </Directory>

  ErrorLog ${APACHE_LOG_DIR}/bag_design_error.log
  CustomLog ${APACHE_LOG_DIR}/bag_design_access.log combined

</VirtualHost>

<VirtualHost *:3001>
  ServerAdmin webmaster@localhost
  DocumentRoot "/var/www/bag-design/bag-design-api/dist"
  Header always set Access-Control-Allow-Origin "*"
  Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS, PATCH"
  Header always set Access-Control-Allow-Headers "*"
  <Directory "/var/www/bag-design/bag-design-api/dist">
    AllowOverride All
    Order allow,deny
    Allow from All   
  </Directory>

  ErrorLog ${APACHE_LOG_DIR}/bag_design_error.log
  CustomLog ${APACHE_LOG_DIR}/bag_design_access.log combined

</VirtualHost>

But when I try to make a PATCH request the response is 405 and I get the following headers:

Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, PATCH
Access-Control-Allow-Origin: *
Allow: GET, POST, PUT, DELETE, OPTIONS, PATCH
Allow: OPTIONS,HEAD,GET,POST
Connection: Keep-Alive
Content-Length: 301
Content-Type: text/html; charset=iso-8859-1
Date: Wed, 18 Jan 2023 10:31:50 GMT
Keep-Alive: timeout=5, max=99
Server: Apache/2.4.52 (Ubuntu)

My question is how can I override the Allow header? I did try to append, unset, set, add, merge this header using Header "method" Allow "PATCH" But nothing worked.

One thing is announce clients the methods you allow (through headers) and another how you actually allow them to be used in your config (actual functionality in the server, with a module)

The way to allow methods is through mod_allowmethods module. You have to load it.

And then use the AllowMethods directive. In your directory/location add:

<Directory /var/www/bag-design/bag-design-web/build>
    AllowOverride none
    Require all granted
    AllowMethods GET POST PUT DELETE OPTIONS PATCH 
</Directory>

PS: do not set allowoverride to all unless you really need it, you don´t need if if you are the admin of the site. Also Allow,Deny,Order are older 2.2.x directives, you should not be using them nowadays. Quoting Directory paths is not necessary either.

PS2: Note that aside from allowing a method there must be something that provides that behaviour to apache (mod_dav?)