diff --git a/login/token.php b/login/token.php
index ee4d6cacc5d..54e9be146c7 100644
--- a/login/token.php
+++ b/login/token.php
@@ -31,6 +31,8 @@ $username = required_param('username', PARAM_USERNAME);
 $password = required_param('password', PARAM_RAW);
 $serviceshortname  = required_param('service',  PARAM_ALPHANUMEXT);
 
+// Allow CORS requests.
+header('Access-Control-Allow-Origin: *');
 echo $OUTPUT->header();
 
 if (!$CFG->enablewebservices) {