API Route not wokring

Dear All,
Could any one please help ? 
I am using CI4 to build rest API. But, I cannot protect API route if I turned AutoRoute to FALSE my frontend cannot send POST method with Cross Origin Resource Sharing to my API.
I try to allow all header origin and all API methods with Filter But, it's not working if AutoRoute turned to False.
if I turned Auto Route to True. Everything works fine with Cross Origin Resource Sharing But, I cannot protect the Route with filter. Because When try to send POST method to get the route that defined with get Method it's still can fetch data and nothing can protected AutoRoute.
example: I turned AutoRoute to True. I defined method $route->get('/users','User::index',['Filter'=>'AuthFilter']);

But, I send POST method to my_web_url/users the system still response data back to client without any crediential.