diff --git a/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java b/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
index ca0f20a..0833d47 100644
--- a/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
+++ b/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
@@ -61,6 +61,8 @@ public class WebSecurityConfig {
         CorsConfiguration config = new CorsConfiguration();
         config.setAllowedOriginPatterns(List.of(
             "https://rayhan-erp.bolbol.tn",
+            "https://api.bolbol.tn",
+            "https://*.bolbol.tn",
             "http://localhost:*",
             "http://127.0.0.1:*"
         ));