diff --git a/passbook/providers/oauth/settings.py b/passbook/providers/oauth/settings.py
index 88903380b..b8bd2e1a0 100644
--- a/passbook/providers/oauth/settings.py
+++ b/passbook/providers/oauth/settings.py
@@ -1,6 +1,8 @@
 """passbook OAuth_Provider"""
+from django.conf import settings
+
+CORS_ORIGIN_ALLOW_ALL = settings.DEBUG
 
-CORS_ORIGIN_ALLOW_ALL = True
 REQUEST_APPROVAL_PROMPT = "auto"
 
 INSTALLED_APPS = [