diff --git a/src/main/java/com/guams/review/configuration/JwtAuthenticationFilter.java b/src/main/java/com/guams/review/configuration/JwtAuthenticationFilter.java
index c154ffe..5d0d696 100644
--- a/src/main/java/com/guams/review/configuration/JwtAuthenticationFilter.java
+++ b/src/main/java/com/guams/review/configuration/JwtAuthenticationFilter.java
@@ -54,7 +54,7 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
                         if (isRateLimited(authorUuid, request)) {
                             response.setStatus(429); // TOO MANY REQUESTS
                             response.setCharacterEncoding("UTF-8");
-                            response.getWriter().write("{\"message\":\"Vous avez envoyé trop de requête d'un coups, patientez un  peu...\"}");
+                            response.getWriter().write("{\"message\":\"Vous avez envoyé trop de requête d'un coups, patientez un peu...\"}");
                             return;
                         }
 
diff --git a/src/main/java/com/guams/review/configuration/SpringSecurityConfig.java b/src/main/java/com/guams/review/configuration/SpringSecurityConfig.java
index 2c0bad3..f71f206 100644
--- a/src/main/java/com/guams/review/configuration/SpringSecurityConfig.java
+++ b/src/main/java/com/guams/review/configuration/SpringSecurityConfig.java
@@ -52,8 +52,7 @@ public class SpringSecurityConfig {
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
-//        configuration.setAllowedOrigins(List.of("http://192.168.1.35:4200"));
-        configuration.setAllowedOrigins(List.of("http://localhost:4200"));
+        configuration.setAllowedOrigins(List.of("https://abonentendeur.guams.fr", "http://192.168.1.35:4200", "http://localhost:4200"));
         configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE")); // Méthodes HTTP autorisées
         configuration.setAllowedHeaders(List.of("Authorization", "Content-Type")); // En-têtes autorisés
         configuration.setAllowCredentials(true); // Permet l'utilisation des cookies ou des tokens