diff --git a/config/cors.php b/config/cors.php
index b685d4e6..ada32518 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -6,7 +6,7 @@ return [
     'allowed_origins_patterns' => [],
     'allowed_methods'          => ['GET', 'POST', 'DELETE', 'PUT', 'OPTIONS'],
     'allowed_headers'          => ['Content-Type', 'Authorization', 'Refresh-Authorization', 'Content-Disposition'],
-    'exposed_headers'          => ['Authorization'],
+    'exposed_headers'          => ['Authorization', 'Refresh-Authorization', 'Content-Disposition'],
     'max_age'                  => 7200,
     'supports_credentials'     => true,
 ];