diff --git a/config/cors.php b/config/cors.php
index ec9ac6d..38b7b37 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -1,5 +1,13 @@
 <?php
 
+$allowed_origins = [
+    '127.0.0.1'
+];
+
+// 从 config(app.url) 中获取域名
+$allowed_origins[] = parse_url(config('app.url'), PHP_URL_HOST);
+
+
 return [
 
     /*
@@ -19,7 +27,7 @@
 
     'allowed_methods' => ['*'],
 
-    'allowed_origins' => ['*'],
+    'allowed_origins' => $allowed_origins,
 
     'allowed_origins_patterns' => [],