diff --git a/src/backend/app/main.py b/src/backend/app/main.py
index ee6dae1..a4d12f8 100644
--- a/src/backend/app/main.py
+++ b/src/backend/app/main.py
@@ -1,4 +1,5 @@
 from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 from contextlib import asynccontextmanager
 import backend.app.core
 from backend.app.core.logging_config import setup_logging
@@ -19,6 +20,20 @@ async def lifespan(_app: FastAPI):
 app.include_router(api_router_v1, prefix="/api/v1", tags=["API V1"])
 
 
+origins = [
+    # allow all requests from localhost
+    "http://localhost",
+]
+
+app.add_middleware(
+    CORSMiddleware, # type: ignore
+    allow_origins=origins,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+
 @app.get("/")
 def read_root():
     return {"Hello": "World"}