diff --git a/freekake_api/freekake_api/settings.py b/freekake_api/freekake_api/settings.py
index 43d0253..d5c7ef0 100644
--- a/freekake_api/freekake_api/settings.py
+++ b/freekake_api/freekake_api/settings.py
@@ -150,9 +150,8 @@ DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 #     "http://localhost:5173",
 #     "http://127.0.0.1:5173",
 # ]
-CORS_ALLOWED_ORIGINS = config(
-    "CORS_ALLOWED_ORIGINS", 
-    default="http://localhost:3000,http://localhost:5173,http://127.0.0.1:5173", cast=Csv())
+CORS_ALLOWED_ORIGINS = config('CORS_ALLOWED_ORIGINS', cast=Csv(), default=[])
+CORS_ALLOW_CREDENTIALS = True
 
 REST_FRAMEWORK = {
     'DEFAULT_PAGINATION_CLASS':