diff --git a/app.py b/app.py
index 71f16f7..7a28331 100644
--- a/app.py
+++ b/app.py
@@ -9,6 +9,7 @@ from flask_security import Security, current_user, auth_required, roles_required
 from flask_security.utils import FsPermNeed
 from flask_babelex import Babel, gettext, lazy_gettext, format_datetime
 from flask_principal import Permission
+from flask_cors import CORS
 from datetime import datetime
 import pytz
 import json
@@ -41,6 +42,9 @@ babel = Babel(app)
 
 app.jinja_env.filters['quote_plus'] = lambda u: quote_plus(u)
 
+# cors
+cors = CORS(app, resources={r"/api/*": {"origins": "*"}})
+
 # create db
 db = SQLAlchemy(app)
 
diff --git a/requirements.txt b/requirements.txt
index f438863..95e5f37 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,6 +12,7 @@ email-validator==1.1.1
 Flask==1.1.2
 Flask-BabelEx==0.9.4
 Flask-Bootstrap==3.3.7.1
+Flask-Cors==3.0.8
 Flask-Dance==3.0.0
 Flask-Login==0.5.0
 Flask-Mail==0.9.1