diff --git a/backend/main.py b/backend/main.py
index 5e9b7a7..6b630af 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -25,7 +25,7 @@ app.add_middleware(
     allow_origins=["*"],
     allow_credentials=True,
     allow_methods=["*"],
-    allow_headers=["*"],
+    allow_headers=["*", "X-API-Key", "X-Client-IP"],
 )
 
 API_KEY = "your-secret-key-here"  # 建议从环境变量读取