diff --git a/packages/web/src/Transport/Validation/CorsValidation.ts b/packages/web/src/Transport/Validation/CorsValidation.ts
index c493c592..a8652d5c 100644
--- a/packages/web/src/Transport/Validation/CorsValidation.ts
+++ b/packages/web/src/Transport/Validation/CorsValidation.ts
@@ -45,6 +45,10 @@ export class CorsValidation extends RequestValidatorAbstract<ICorsOptions> {
             ["access-control-allow-origin", this.getAccessControlOrigin(request)],
         ];
 
+        if (this.options.credentials) {
+            setHeaders.push(["access-control-allow-credentials", "true"]);
+        }
+
         const vary = this.getVary();
         if (vary) {
             setHeaders.push(["Vary", vary]);