diff --git a/wise-api/src/main/java/com/wisemapping/config/rest/WebConfig.java b/wise-api/src/main/java/com/wisemapping/config/rest/WebConfig.java
index 923ec980..3951e213 100644
--- a/wise-api/src/main/java/com/wisemapping/config/rest/WebConfig.java
+++ b/wise-api/src/main/java/com/wisemapping/config/rest/WebConfig.java
@@ -17,8 +17,10 @@ public class WebConfig implements WebMvcConfigurer {
     public void addCorsMappings(@NotNull CorsRegistry registry) {
         if (!corsAllowedOrigins.isEmpty()) {
             registry.addMapping("/api/**")
-                    .allowedOrigins(corsAllowedOrigins).
-                    maxAge(3600);
+                    .exposedHeaders("*")
+                    .allowedHeaders("*")
+                    .allowedOrigins(corsAllowedOrigins)
+                    .maxAge(3600);
         }
     }
 }
\ No newline at end of file
diff --git a/wise-api/src/main/resources/application.yml b/wise-api/src/main/resources/application.yml
index d15a6f16..32d629d5 100644
--- a/wise-api/src/main/resources/application.yml
+++ b/wise-api/src/main/resources/application.yml
@@ -71,7 +71,7 @@ app:
   # Redirect to this url, this url must be configured in the google app {baseurl}/c/registration-google
   #security.oauth2.google.callbackUrl=<oauth callback url>
   security:
-    corsAllowedOrigins: https://dev.wisemapping.com
+#    corsAllowedOrigins: https://dev.wisemapping.com
     oauth2:
       google:
         confirmUrl: https://oauth2.googleapis.com/token