diff --git a/backend/src/main/java/com/edufocus/edufocus/user/config/WebConfiguration.java b/backend/src/main/java/com/edufocus/edufocus/user/config/WebConfiguration.java
index 362e689..98007f4 100644
--- a/backend/src/main/java/com/edufocus/edufocus/user/config/WebConfiguration.java
+++ b/backend/src/main/java/com/edufocus/edufocus/user/config/WebConfiguration.java
@@ -25,10 +25,12 @@ public class WebConfiguration implements WebMvcConfigurer {
     public void addCorsMappings(CorsRegistry registry) {
         registry
                 .addMapping("/**")
-                .allowedOrigins("*")
+                .allowedOrigins("http://i11a701.p.ssafy.io/", "http://localhost:5173", "http://localhost:4173")
                 .allowedMethods(HttpMethod.GET.name(), HttpMethod.POST.name(), HttpMethod.PUT.name(),
                         HttpMethod.DELETE.name(), HttpMethod.HEAD.name(), HttpMethod.OPTIONS.name(),
                         HttpMethod.PATCH.name())
+                .allowCredentials(true)
+                .allowedHeaders("*")
                 .maxAge(1800); // Pre-flight Caching
     }