diff --git a/src/app.js b/src/app.js
index d7fb99e..5f3c8d9 100644
--- a/src/app.js
+++ b/src/app.js
@@ -41,7 +41,16 @@ app.use(helmet({
     },
   },
 }));
-app.use(cors());
+app.use(cors({
+  origin: [
+    'https://servicewechat.com',
+    'https://miniapp-api-test.dxz99wyr.cn',
+    'https://api-miniapp.dxz99wyr.cn'
+  ],
+  methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+  allowedHeaders: ['Content-Type', 'Authorization', 'Accept', 'Origin', 'X-Requested-With'],
+  credentials: false
+}));
 app.use(express.json({ limit: '10mb' }));
 app.use(express.urlencoded({ extended: true }));