diff --git a/src/main/java/com/guo/learningprogresstracker/config/SaTokenDevFilterConfig.java b/src/main/java/com/guo/learningprogresstracker/config/SaTokenDevFilterConfig.java
index 02e622e..2e05bb5 100644
--- a/src/main/java/com/guo/learningprogresstracker/config/SaTokenDevFilterConfig.java
+++ b/src/main/java/com/guo/learningprogresstracker/config/SaTokenDevFilterConfig.java
@@ -22,10 +22,12 @@ public class SaTokenDevFilterConfig {
                 .setBeforeAuth(r -> {
                     String path = SaHolder.getRequest().getRequestPath();   // 不含上下文
                     String method = SaHolder.getRequest().getMethod();
+                    log.info("[dev]{}", SaHolder.getRequest().getRequestPath());
                     log.info("[DEV] {} {}", method, path);
                     if ("OPTIONS".equalsIgnoreCase(SaHolder.getRequest().getMethod())) {
                         SaHolder.getResponse().setStatus(200);
-                        SaHolder.getResponse().setHeader("access-control-allow-origin","*");
+                        SaHolder.getResponse().setHeader("access-control-allow-origin", SaHolder.getRequest().getRequestPath().replace(SaHolder.getRequest().getRequestPath(), ""));
+                        SaHolder.getResponse().setHeader("access-control-allow-credentials", "true");
                         SaRouter.back();
                     }
                 })