diff --git a/src/main/java/fairytale/tbd/global/config/SecurityConfig.java b/src/main/java/fairytale/tbd/global/config/SecurityConfig.java
index 65b3456..ad0be90 100644
--- a/src/main/java/fairytale/tbd/global/config/SecurityConfig.java
+++ b/src/main/java/fairytale/tbd/global/config/SecurityConfig.java
@@ -62,11 +62,11 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
 			// CORS
 			.cors(corsCustomizer -> corsCustomizer.configurationSource(request -> {
 				CorsConfiguration config = new CorsConfiguration();
-				config.setAllowedOrigins(Collections.singletonList("*"));
+				config.setAllowedOriginPatterns(Collections.singletonList("*"));
 				config.setAllowedMethods(Collections.singletonList("*"));
 				config.setAllowCredentials(true);
 				config.setAllowedHeaders(Collections.singletonList("*"));
-				config.setExposedHeaders(Arrays.asList("Authorization"));
+				config.setExposedHeaders(Arrays.asList("Authorization", "Authorization-refresh"));
 				config.setMaxAge(3600L);
 				return config;
 			}));