diff --git a/src/main/java/com/gameplatform/server/config/CorsConfig.java b/src/main/java/com/gameplatform/server/config/CorsConfig.java
new file mode 100644
index 0000000..020e167
--- /dev/null
+++ b/src/main/java/com/gameplatform/server/config/CorsConfig.java
@@ -0,0 +1,27 @@
+package com.gameplatform.server.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.reactive.CorsWebFilter;
+import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
+
+@Configuration
+public class CorsConfig {
+
+    @Bean
+    public CorsWebFilter corsWebFilter() {
+        CorsConfiguration config = new CorsConfiguration();
+        config.setAllowCredentials(true);
+        // 使用模式以允许携带凭证时的通配来源
+        config.addAllowedOriginPattern("*");
+        config.addAllowedHeader("*");
+        config.addAllowedMethod("*");
+        config.setMaxAge(3600L);
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", config);
+        return new CorsWebFilter(source);
+    }
+}
+
diff --git a/src/main/java/com/gameplatform/server/security/SecurityConfig.java b/src/main/java/com/gameplatform/server/security/SecurityConfig.java
index 8d77014..ad9807e 100644
--- a/src/main/java/com/gameplatform/server/security/SecurityConfig.java
+++ b/src/main/java/com/gameplatform/server/security/SecurityConfig.java
@@ -18,7 +18,7 @@ public class SecurityConfig {
     public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
         return http
                 .csrf(ServerHttpSecurity.CsrfSpec::disable)
-                .cors(ServerHttpSecurity.CorsSpec::disable)
+                .cors(cors -> {})
                 .httpBasic(ServerHttpSecurity.HttpBasicSpec::disable)
                 .formLogin(ServerHttpSecurity.FormLoginSpec::disable)
                 .authorizeExchange(ex -> ex
diff --git a/target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class b/target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class
new file mode 100644
index 0000000..b5b52af
Binary files /dev/null and b/target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class differ
diff --git a/target/classes/com/gameplatform/server/model/entity/account/UserAccount.class b/target/classes/com/gameplatform/server/model/entity/account/UserAccount.class
new file mode 100644
index 0000000..e20bf45
Binary files /dev/null and b/target/classes/com/gameplatform/server/model/entity/account/UserAccount.class differ
diff --git a/target/classes/mapper/account/UserAccountMapper.xml b/target/classes/mapper/account/UserAccountMapper.xml
new file mode 100644
index 0000000..18bbde8
--- /dev/null
+++ b/target/classes/mapper/account/UserAccountMapper.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.gameplatform.server.mapper.account.UserAccountMapper">
+    <resultMap id="UserAccountMap" type="com.gameplatform.server.model.entity.account.UserAccount">
+        <id property="id" column="id" />
+        <result property="userType" column="user_type" />
+        <result property="username" column="username" />
+        <result property="displayName" column="display_name" />
+        <result property="passwordHash" column="password_hash" />
+        <result property="role" column="role" />
+        <result property="status" column="status" />
+        <result property="pointsBalance" column="points_balance" />
+        <result property="createdAt" column="created_at" />
+        <result property="updatedAt" column="updated_at" />
+    </resultMap>
+
+    <select id="findByUsernameAndType" resultMap="UserAccountMap">
+        SELECT id, user_type, username, display_name, password_hash, role, status, points_balance, created_at, updated_at
+        FROM user_account
+        WHERE username = #{username}
+          AND user_type = #{userType}
+        LIMIT 1
+    </select>
+</mapper>
+