diff --git a/app/Http/Middleware/CollectCors.php b/app/Http/Middleware/CollectCors.php
index 5af5054..316f563 100644
--- a/app/Http/Middleware/CollectCors.php
+++ b/app/Http/Middleware/CollectCors.php
@@ -25,11 +25,15 @@ class CollectCors
 
     private function corsHeaders(Request $request): array
     {
+        // Get the origin from the request, default to '*' if not present
+        $origin = $request->header('Origin', '*');
+
         return [
-            'Access-Control-Allow-Origin' => '*',
+            'Access-Control-Allow-Origin' => $origin,
             'Access-Control-Allow-Methods' => 'GET, POST, OPTIONS',
             'Access-Control-Allow-Headers' => 'Content-Type, X-Requested-With',
             'Access-Control-Max-Age' => '86400',
+            'Access-Control-Allow-Credentials' => 'true',
         ];
     }
 }