diff --git a/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/ErrorController.java b/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/ErrorController.java
index 42d33f5..0b002a8 100644
--- a/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/ErrorController.java
+++ b/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/ErrorController.java
@@ -2,6 +2,7 @@ package net.shyshkin.study.fullstack.supportportal.backend.controller;
 
 import net.shyshkin.study.fullstack.supportportal.backend.domain.HttpResponse;
 import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.CrossOrigin;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RestController;
 
@@ -9,6 +10,7 @@ import static net.shyshkin.study.fullstack.supportportal.backend.utility.HttpRes
 import static org.springframework.http.HttpStatus.NOT_FOUND;
 
 @RestController
+@CrossOrigin("http://localhost:4200")
 public class ErrorController {
 
     @GetMapping("/error")
diff --git a/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/UserResource.java b/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/UserResource.java
index d035e7d..3b0d426 100644
--- a/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/UserResource.java
+++ b/support-portal-backend/src/main/java/net/shyshkin/study/fullstack/supportportal/backend/controller/UserResource.java
@@ -30,6 +30,7 @@ import static org.springframework.http.HttpStatus.OK;
 @RestController
 @RequestMapping("user")
 @RequiredArgsConstructor
+@CrossOrigin("http://localhost:4200")
 public class UserResource {
 
     private final UserService userService;
@@ -47,6 +48,7 @@ public class UserResource {
     }
 
     @PostMapping("login")
+    @CrossOrigin(value = "http://localhost:4200", exposedHeaders = {SecurityConstants.JWT_TOKEN_HEADER})
     public ResponseEntity<User> login(@RequestBody User user) {
 
         authenticate(user.getUsername(), user.getPassword());