diff --git a/src/app.ts b/src/app.ts
index 62a27de..9e89e8a 100644
--- a/src/app.ts
+++ b/src/app.ts
@@ -67,11 +67,11 @@ app.use((req, res, next) => {
             .map((s) => s.trim())
             .filter(Boolean);
 
-          const originCors = await db.whitelistcors.findFirst({
+          const originCors = await db.whitelistcors.findMany({
             where: { is_active: "Y" },
           });
-          if (originCors) {
-            allowedOrigins.push(originCors.origin);
+          if (originCors.length > 0) {
+            allowedOrigins.push(...originCors.map((item) => item.origin));
           }
           corsCache.set(cacheKey, {
             origins: allowedOrigins,