diff --git a/docker-compose.yml b/docker-compose.yml
index cdaa4a7..8948c61 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -82,6 +82,11 @@ services:
       - traefik.http.routers.logto.priority=1
       - traefik.http.routers.logto.entrypoints=websecure
       - traefik.http.routers.logto.tls=true
+      - traefik.http.routers.logto.middlewares=logto-cors
+      - traefik.http.middlewares.logto-cors.headers.accessControlAllowOriginList=${PUBLIC_PROTOCOL:-https}://${PUBLIC_HOST:-localhost}:3002
+      - traefik.http.middlewares.logto-cors.headers.accessControlAllowMethods=GET,POST,PUT,PATCH,DELETE,OPTIONS
+      - traefik.http.middlewares.logto-cors.headers.accessControlAllowHeaders=Authorization,Content-Type
+      - traefik.http.middlewares.logto-cors.headers.accessControlAllowCredentials=true
       - traefik.http.services.logto.loadbalancer.server.port=3001
       - traefik.http.routers.logto-console.rule=PathPrefix(`/`)
       - traefik.http.routers.logto-console.entrypoints=admin-console