diff --git a/lib/middleware.js b/lib/middleware.js
index 8189ea66..b76a9d40 100644
--- a/lib/middleware.js
+++ b/lib/middleware.js
@@ -3,7 +3,12 @@ import cors from 'cors';
 import { getSession } from './session';
 import { getAuthToken, getShareToken } from './auth';
 
-export const useCors = createMiddleware(cors());
+export const useCors = createMiddleware(
+  cors({
+    // Cache CORS preflight request 24 hours by default
+    maxAge: process.env.CORS_MAX_AGE || 86400,
+  }),
+);
 
 export const useSession = createMiddleware(async (req, res, next) => {
   let session;