diff --git a/backend/app.py b/backend/app.py
index f837b0e..c77b4e2 100644
--- a/backend/app.py
+++ b/backend/app.py
@@ -53,16 +53,15 @@ app = FastAPI(
 
 app.add_middleware(GZipMiddleware, minimum_size=1000)
 
-if not settings.PRODUCTION:
-  allowed_origins = ["*"]
+allowed_origins = ["http://localhost:5001", "https://stg.samliu.io.vn"]
 
-  app.add_middleware(
-    CORSMiddleware,
-    allow_origins=allowed_origins,
-    allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
-  )
+app.add_middleware(
+  CORSMiddleware,
+  allow_origins=allowed_origins,
+  allow_credentials=True,
+  allow_methods=["*"],
+  allow_headers=["*"],
+)
 
 @app.exception_handler(HTTPException)
 async def unicorn_exception_handler(request: Request, exc: HTTPException):