diff --git a/config/default.json b/config/default.json
index 2440e3fc72..359525e3c7 100644
--- a/config/default.json
+++ b/config/default.json
@@ -11,10 +11,10 @@
       "timeout": 99999999
     },
     "images": {
-      "url": "http://localhost/api/resources"
+      "url": "http://localhost/api/resources/"
     },
     "resource": {
-      "url": "http://localhost/api/resources"
+      "url": "http://localhost/api/resources/"
     }
   },
   "repository": {
diff --git a/src/api/ADempiere/file-management/resource-reference.ts b/src/api/ADempiere/file-management/resource-reference.ts
index 38df48512a..5892f82fec 100644
--- a/src/api/ADempiere/file-management/resource-reference.ts
+++ b/src/api/ADempiere/file-management/resource-reference.ts
@@ -79,7 +79,7 @@ export function requestGetResource({
   fileName
 }) {
   return request({
-    url: `${config.adempiere.resource.url}/${fileName}`,
+    url: `${config.adempiere.resource.url}${fileName}`,
     method: 'get',
     isWithoutAuthorization: true,
     params: {
@@ -119,7 +119,7 @@ export function requestDeleteResources({
   fileName
 }) {
   return request({
-    url: `${config.adempiere.resource.url}/${fileName}`,
+    url: `${config.adempiere.resource.url}${fileName}`,
     method: 'delete',
     isWithoutAuthorization: true
   })
@@ -134,7 +134,7 @@ export function requestShareResources({
   seconds
 }) {
   return request({
-    baseURL: `${config.adempiere.resource.url}/download-url/${fileName}`,
+    baseURL: `${config.adempiere.resource.url}download-url/${fileName}`,
     isWithoutAuthorization: true,
     method: 'get',
     params: {
diff --git a/src/utils/request.js b/src/utils/request.js
index 5a1055edbb..4dc88d4a31 100644
--- a/src/utils/request.js
+++ b/src/utils/request.js
@@ -61,6 +61,10 @@ service.interceptors.response.use(
    * You can also judge the status by HTTP Status Code
    */
   response => {
+    response.headers['Access-Control-Allow-Origin'] = '*'
+    response.headers['Access-Control-Allow-Credentials'] = 'true'
+    response.headers['Access-Control-Request-Method'] = '*'
+
     const res = response.data
     // if the custom code is not 20000, it is judged as an error.
     if (response.status >= 400) {