diff --git a/app/src/views/IndexView.vue b/app/src/views/IndexView.vue
index 3ec684b..2305a24 100644
--- a/app/src/views/IndexView.vue
+++ b/app/src/views/IndexView.vue
@@ -27,11 +27,11 @@ function toggleUser() {
 }
 
 function login() {
-  location.href = "https://deeptrain.vercel.app/login?app=lightnotes";
+  location.href = "https://deeptrain.net/login?app=lightnotes";
 }
 
 function register() {
-  location.href = "https://deeptrain.vercel.app/register?app=lightnotes";
+  location.href = "https://deeptrain.net/register?app=lightnotes";
 }
 </script>
 <template>
diff --git a/backend/main.go b/backend/main.go
index babd4df..ee4d61d 100644
--- a/backend/main.go
+++ b/backend/main.go
@@ -22,6 +22,7 @@ func main() {
 	}
 
 	{
+		app.Use(middleware.CORSMiddleware())
 		app.Use(middleware.BuiltinMiddleWare(ConnectMySQL(), ConnectRedis()))
 		app.Use(middleware.ThrottleMiddleware())
 		app.Use(AuthMiddleware())
diff --git a/backend/middleware/cors.go b/backend/middleware/cors.go
new file mode 100644
index 0000000..17f12c3
--- /dev/null
+++ b/backend/middleware/cors.go
@@ -0,0 +1,41 @@
+package middleware
+
+import (
+	"github.com/gin-gonic/gin"
+	"net/http"
+)
+
+var allowedOrigins = []string{
+	"https://fystart.cn",
+	"https://www.fystart.cn",
+	"https://40code.com",
+	"https://www.40code.com",
+}
+
+func Contains[T comparable](value T, slice []T) bool {
+	for _, item := range slice {
+		if item == value {
+			return true
+		}
+	}
+	return false
+}
+
+func CORSMiddleware() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		origin := c.Request.Header.Get("Origin")
+		if Contains(origin, allowedOrigins) {
+			c.Writer.Header().Set("Access-Control-Allow-Origin", origin)
+			c.Writer.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS")
+			c.Writer.Header().Set("Access-Control-Allow-Headers", "Origin, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
+
+			if c.Request.Method == "OPTIONS" {
+				c.Writer.Header().Set("Access-Control-Max-Age", "3600")
+				c.AbortWithStatus(http.StatusOK)
+				return
+			}
+		}
+
+		c.Next()
+	}
+}