diff --git a/blog-api/config/common/routes.php b/blog-api/config/common/routes.php
index 6e01dbe7..2d39e0ab 100644
--- a/blog-api/config/common/routes.php
+++ b/blog-api/config/common/routes.php
@@ -15,6 +15,7 @@
 use Yiisoft\Router\UrlGeneratorInterface;
 use Yiisoft\Swagger\Middleware\SwaggerJson;
 use Yiisoft\Swagger\Middleware\SwaggerUi;
+use Yiisoft\Yii\Middleware\CorsAllowAll;
 
 return [
     Route::get('/')
@@ -61,6 +62,7 @@
                 }),
             Route::get('/openapi.json')
                 ->middleware(FormatDataResponseAsJson::class)
-                ->action(SwaggerJson::class),
+                ->middleware(CorsAllowAll::class)
+                ->action([SwaggerJson::class, 'handle']),
         ),
 ];
diff --git a/blog/config/common/routes/routes.php b/blog/config/common/routes/routes.php
index 0b0275b1..0d5156ae 100644
--- a/blog/config/common/routes/routes.php
+++ b/blog/config/common/routes/routes.php
@@ -31,6 +31,7 @@
 use Yiisoft\Router\UrlGeneratorInterface;
 use Yiisoft\Swagger\Middleware\SwaggerJson;
 use Yiisoft\Swagger\Middleware\SwaggerUi;
+use Yiisoft\Yii\Middleware\CorsAllowAll;
 use Yiisoft\Yii\Middleware\HttpCache;
 use Yiisoft\Yii\RateLimiter\Counter;
 use Yiisoft\Yii\RateLimiter\LimitRequestsMiddleware;
@@ -174,6 +175,7 @@
                 ->name('swagger/index'),
             Route::get('/openapi.json')
                 ->middleware(FormatDataResponseAsJson::class)
-                ->action(SwaggerJson::class),
+                ->middleware(CorsAllowAll::class)
+                ->action([SwaggerJson::class, 'handle']),
         ),
 ];