diff --git a/config/cors.php b/config/cors.php
index dc7758cd..ee958e8b 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -1,12 +1,12 @@
 <?php
 
 return [
-    'paths'                    => [],
+    'paths'                    => ['*'],
     'allowed_origins'          => ['*'],
     'allowed_origins_patterns' => [],
-    'allowed_methods'          => ['*'],
-    'allowed_headers'          => ['*'],
+    'allowed_methods'          => ['GET', 'POST', 'DELETE', 'PUT', 'OPTIONS'],
+    'allowed_headers'          => ['Content-Type', 'Authorization', 'Refresh-Authorization'],
     'exposed_headers'          => [],
-    'max_age'                  => 0,
+    'max_age'                  => 7200,
     'supports_credentials'     => true,
 ];