diff --git a/.github/workflows/stacksDockerDeployProduction.yaml b/.github/workflows/stacksDockerDeployProduction.yaml
index fab494d4..1aab5478 100644
--- a/.github/workflows/stacksDockerDeployProduction.yaml
+++ b/.github/workflows/stacksDockerDeployProduction.yaml
@@ -23,6 +23,7 @@ jobs:
         working-directory: amp-laravel
         run: |
           echo "APP_KEY=${{ secrets.LARAVEL_APP_KEY }}" > .env.example
+          echo "APP_URL=http://${{ secrets.EC2_HOST_STAGING }}:8000" > .env.example
           echo "DB_CONNECTION=mysql" >> .env.example
           echo "DB_HOST=${{ secrets.LARAVEL_DATABASE_HOST }}" >> .env.example
           echo "DB_PORT=${{ secrets.LARAVEL_DATABASE_PORT_NUMBER }}" >> .env.example
diff --git a/.github/workflows/stacksDockerDeployStaging.yaml b/.github/workflows/stacksDockerDeployStaging.yaml
index 7388ffa1..8bfaf720 100644
--- a/.github/workflows/stacksDockerDeployStaging.yaml
+++ b/.github/workflows/stacksDockerDeployStaging.yaml
@@ -23,6 +23,7 @@ jobs:
       working-directory: amp-laravel
       run: |
         echo "APP_KEY=${{ secrets.LARAVEL_APP_KEY }}" > .env.example
+        echo "APP_URL=http://${{ secrets.EC2_HOST_STAGING }}:8000" > .env.example
         echo "DB_CONNECTION=mysql" >> .env.example
         echo "DB_HOST=${{ secrets.LARAVEL_DATABASE_HOST }}" >> .env.example
         echo "DB_PORT=${{ secrets.LARAVEL_DATABASE_PORT_NUMBER }}" >> .env.example
diff --git a/amp-laravel/.env.example b/amp-laravel/.env.example
index 1e41bf62..c38e1f04 100644
--- a/amp-laravel/.env.example
+++ b/amp-laravel/.env.example
@@ -1,3 +1,5 @@
+APP_URL=${LARAVEL_APP_URL}
+
 APP_KEY=${LARAVEL_APP_KEY}
 
 DB_CONNECTION=mysql
diff --git a/amp-laravel/config/cors.php b/amp-laravel/config/cors.php
new file mode 100644
index 00000000..b4c685b2
--- /dev/null
+++ b/amp-laravel/config/cors.php
@@ -0,0 +1,25 @@
+<?php
+
+return [
+
+    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+
+    'allowed_methods' => ['*'],
+
+    'allowed_origins' => [
+        'http://fse-final-riyad.s3-website.eu-west-3.amazonaws.com',
+        'http://localhost:5173',
+        'http://127.0.0.1:5173',
+    ],
+
+    'allowed_origins_patterns' => [],
+
+    'allowed_headers' => ['*'],
+
+    'exposed_headers' => [],
+
+    'max_age' => 0,
+
+    'supports_credentials' => true,
+
+];