diff --git a/src/snek/system/middleware.py b/src/snek/system/middleware.py
index 69fe378..2946262 100644
--- a/src/snek/system/middleware.py
+++ b/src/snek/system/middleware.py
@@ -22,6 +22,7 @@ async def cors_allow_middleware(request, handler):
     response.headers["Access-Control-Allow-Origin"] = "*"
     response.headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS, PUT, DELETE"
     response.headers["Access-Control-Allow-Headers"] = "*"
+    response.headers["Access-Control-Allow-Credentials"] = "true"
     return response
 
 
@@ -34,10 +35,12 @@ async def cors_middleware(request, handler):
             "GET, POST, PUT, DELETE, OPTIONS"
         )
         response.headers["Access-Control-Allow-Headers"] = "*"
+        response.headers["Access-Control-Allow-Credentials"] = "true"
         return response
 
     response = await handler(request)
     response.headers["Access-Control-Allow-Origin"] = "*"
     response.headers["Access-Control-Allow-Methods"] = "GET, POST, PUT, DELETE, OPTIONS"
     response.headers["Access-Control-Allow-Headers"] = "*"
+    response.headers["Access-Control-Allow-Credentials"] = "true"
     return response