diff --git a/IRaCIS.Core.API/Startup.cs b/IRaCIS.Core.API/Startup.cs
index 000d20211..16d57165a 100644
--- a/IRaCIS.Core.API/Startup.cs
+++ b/IRaCIS.Core.API/Startup.cs
@@ -168,6 +168,8 @@ namespace IRaCIS.Core.API
 
             app.UseForwardedHeaders();
 
+            app.UseCors(t => t.AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader());
+
             //不需要 token 访问的静态文件  wwwroot css, JavaScript, and images don't require authentication.
             app.UseStaticFiles();
 
@@ -219,7 +221,7 @@ namespace IRaCIS.Core.API
             //文件伺服  必须带Token 访问
             //app.UseIRacisHostStaticFileStore(env);
 
-            app.UseCors(t => t.AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader());
+
 
             app.UseEndpoints(endpoints =>
             {
diff --git a/IRaCIS.Core.API/_PipelineExtensions/IRacisHostFileStoreConfig.cs b/IRaCIS.Core.API/_PipelineExtensions/IRacisHostFileStoreConfig.cs
index 14f0aae89..449c48da0 100644
--- a/IRaCIS.Core.API/_PipelineExtensions/IRacisHostFileStoreConfig.cs
+++ b/IRaCIS.Core.API/_PipelineExtensions/IRacisHostFileStoreConfig.cs
@@ -27,7 +27,12 @@ namespace IRaCIS.Core.API
                 ServeUnknownFileTypes = true,
                 DefaultContentType = "application/octet-stream"
 
-            });
+           //     // Set up custom content types - associating file extension to MIME type
+           //var provider = new FileExtensionContentTypeProvider();
+           // // Add new mappings
+           // provider.Mappings[".myapp"] = "application/x-msdownload";
+
+        });
         }
     }
 }