diff --git a/src/auth/telegram-bot-login.ts b/src/auth/telegram-bot-login.ts
index f76814b..00cb99d 100644
--- a/src/auth/telegram-bot-login.ts
+++ b/src/auth/telegram-bot-login.ts
@@ -105,7 +105,9 @@ export async function fetchTelegramPhoto(fileId: string) {
   }
 
   return {
-    contentType: response.headers.get('content-type') ?? 'image/jpeg',
+    contentType: file.file_path.toLowerCase().endsWith('.png')
+      ? 'image/png'
+      : 'image/jpeg',
     bytes: Buffer.from(await response.arrayBuffer()),
   };
 }
diff --git a/src/server.ts b/src/server.ts
index c8f5dcd..f3b4b29 100644
--- a/src/server.ts
+++ b/src/server.ts
@@ -41,6 +41,8 @@ app.get('/telegram/photo/:fileId', async (request, reply) => {
   const photo = await fetchTelegramPhoto(params.fileId);
   reply.header('content-type', photo.contentType);
   reply.header('cache-control', 'public, max-age=86400');
+  reply.header('access-control-allow-origin', '*');
+  reply.header('cross-origin-resource-policy', 'cross-origin');
   return reply.send(photo.bytes);
 });