diff --git a/src/main/java/cn/teammodel/security/SecurityConfiguration.java b/src/main/java/cn/teammodel/security/SecurityConfiguration.java
index fbebdaf..93c7ff3 100644
--- a/src/main/java/cn/teammodel/security/SecurityConfiguration.java
+++ b/src/main/java/cn/teammodel/security/SecurityConfiguration.java
@@ -37,6 +37,8 @@ public class SecurityConfiguration {
         http
                 // CSRF禁用，因为不使用session
                 .csrf().disable()
+                .cors().configurationSource(corsConfigurationSource())
+                .and()
                 // 禁用HTTP响应标头
                 .headers().cacheControl().disable()
                 .and()