diff --git a/src/main/java/org/prebid/cache/PBCacheApplication.java b/src/main/java/org/prebid/cache/PBCacheApplication.java
index a625266..4d68c30 100644
--- a/src/main/java/org/prebid/cache/PBCacheApplication.java
+++ b/src/main/java/org/prebid/cache/PBCacheApplication.java
@@ -34,7 +34,8 @@ public void addCorsMappings(CorsRegistry registry) {
         if (corsConfig.isEnabled()) {
             registry.addMapping(corsConfig.getMapping())
                     .allowedOrigins(corsConfig.getAllowedOrigins())
-                    .allowedMethods(corsConfig.getAllowedMethods());
+                    .allowedMethods(corsConfig.getAllowedMethods())
+                    .allowCredentials(corsConfig.isAllowCredentials());
         }
     }
 }
diff --git a/src/main/java/org/prebid/cache/config/CorsConfig.java b/src/main/java/org/prebid/cache/config/CorsConfig.java
index 1f90835..df7f5f1 100644
--- a/src/main/java/org/prebid/cache/config/CorsConfig.java
+++ b/src/main/java/org/prebid/cache/config/CorsConfig.java
@@ -16,4 +16,5 @@ public class CorsConfig {
     private String mapping;
     private String[] allowedOrigins;
     private String[] allowedMethods;
+    private boolean allowCredentials;
 }
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index e707306..2577458 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -15,6 +15,7 @@ cors:
   mapping: "/cache/**"
   allowedOrigins: "*"
   allowedMethods: "GET"
+  allowCredentials: true
 
 # cache
 cache:
diff --git a/src/test/resources/application.yml b/src/test/resources/application.yml
index f0423f9..1258bce 100644
--- a/src/test/resources/application.yml
+++ b/src/test/resources/application.yml
@@ -11,6 +11,7 @@ cors:
   mapping: "/cache/**"
   allowedOrigins: "*"
   allowedMethods: "GET"
+  allowCredentials: true
 
 # cache
 cache: