diff --git a/xiaomusic/httpserver.py b/xiaomusic/httpserver.py
index 962d3e7..bd8fa6c 100644
--- a/xiaomusic/httpserver.py
+++ b/xiaomusic/httpserver.py
@@ -13,6 +13,7 @@ from typing import Annotated
 
 import aiofiles
 from fastapi import Depends, FastAPI, HTTPException, Request, status
+from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import StreamingResponse
 from fastapi.security import HTTPBasic, HTTPBasicCredentials
 from fastapi.staticfiles import StaticFiles
@@ -30,6 +31,7 @@ xiaomusic = None
 config = None
 log = None
 
+
 @asynccontextmanager
 async def app_lifespan(app):
     if xiaomusic is not None:
@@ -74,6 +76,15 @@ app = FastAPI(
     version=__version__,
 )
 
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],  # 允许访问的源
+    allow_credentials=False,  # 支持 cookie
+    allow_methods=["*"],  # 允许使用的请求方法
+    allow_headers=["*"],  # 允许携带的 Headers
+)
+
+
 def reset_http_server():
     log.info(f"disable_httpauth:{config.disable_httpauth}")
     if config.disable_httpauth: