diff --git a/src/main/java/org/ezcode/codetest/common/security/config/SecurityConfig.java b/src/main/java/org/ezcode/codetest/common/security/config/SecurityConfig.java
index efbe8984..a12ae245 100644
--- a/src/main/java/org/ezcode/codetest/common/security/config/SecurityConfig.java
+++ b/src/main/java/org/ezcode/codetest/common/security/config/SecurityConfig.java
@@ -133,15 +133,15 @@ public AccessDeniedHandler customAccessDeniedHandler() {
 	public CorsConfigurationSource corsConfigurationSource() {
 		CorsConfiguration configuration = new CorsConfiguration();
 
-		configuration.setAllowedOrigins(List.of("*")); // 다 허용
+		configuration.setAllowedOriginPatterns(List.of("*"));  // patterns 를 써야됨
 		configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "OPTIONS"));
 		configuration.setAllowedHeaders(List.of("*"));
-		configuration.setAllowCredentials(false);
+		configuration.setExposedHeaders(List.of("*"));
+		configuration.setAllowCredentials(true);  // true 옵션 필요
 
 		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
 		source.registerCorsConfiguration("/**", configuration);
 		return source;
 	}
 
-
 }
diff --git a/src/main/java/org/ezcode/codetest/infrastructure/event/config/WebSocketConfig.java b/src/main/java/org/ezcode/codetest/infrastructure/event/config/WebSocketConfig.java
index 0cb98683..97aea8cb 100644
--- a/src/main/java/org/ezcode/codetest/infrastructure/event/config/WebSocketConfig.java
+++ b/src/main/java/org/ezcode/codetest/infrastructure/event/config/WebSocketConfig.java
@@ -54,5 +54,6 @@ public void configureMessageBroker(MessageBrokerRegistry registry) {
 		registry.setApplicationDestinationPrefixes("/chat");
 		registry.setUserDestinationPrefix("/user");
 	}
+
 }