diff --git a/route/route.php b/route/route.php
index 855e3968..b5d21b26 100644
--- a/route/route.php
+++ b/route/route.php
@@ -17,6 +17,8 @@ Route::view('compatibility', 'index@tpl/compatibility');
 Route::group('api', function () {
     Route::post('token', 'api/Token/index');
     Route::post('upload', 'api/Upload/index');
-})->allowCrossDomain();
+})
+    ->header('Access-Control-Allow-Headers', 'Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With, Token')
+    ->allowCrossDomain();
 
 return [];