diff --git a/public/clientaccesspolicy.xml b/public/clientaccesspolicy.xml
new file mode 100644
index 000000000..5ba9c81a0
--- /dev/null
+++ b/public/clientaccesspolicy.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<access-policy>
+  <cross-domain-access>
+    <policy>
+      <allow-from http-request-headers="*" http-methods="*">
+        <domain uri="*"/>
+      </allow-from>
+      <grant-to>
+        <resource path="/api" include-subpaths="true"/>
+        <resource path="/oauth" include-subpaths="true"/>
+      </grant-to>
+    </policy>
+  </cross-domain-access>
+</access-policy>