diff --git a/src/controllers/well-known.js b/src/controllers/well-known.js
index 0a9937f036..db2b663a0e 100644
--- a/src/controllers/well-known.js
+++ b/src/controllers/well-known.js
@@ -38,6 +38,7 @@ Controller.webfinger = async (req, res) => {
 			return res.sendStatus(404);
 		}
 
+		res.set('Access-Control-Allow-Origin', '*');
 		res.status(200).json(response);
 	} catch (e) {
 		res.sendStatus(404);