diff --git a/user-service/src/main/java/com/justpickup/userservice/domain/jwt/web/AuthController.java b/user-service/src/main/java/com/justpickup/userservice/domain/jwt/web/AuthController.java
index c814285..39cfd79 100644
--- a/user-service/src/main/java/com/justpickup/userservice/domain/jwt/web/AuthController.java
+++ b/user-service/src/main/java/com/justpickup/userservice/domain/jwt/web/AuthController.java
@@ -12,10 +12,7 @@ import lombok.extern.slf4j.Slf4j;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseCookie;
 import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestHeader;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;
 
 import javax.ws.rs.core.HttpHeaders;
 
@@ -29,7 +26,7 @@ public class AuthController {
 
     @GetMapping("/refreshToken")
     public ResponseEntity<Result> refreshToken(@RequestHeader("X-AUTH-TOKEN") String accessToken,
-                                               @RequestHeader("REFRESH-TOKEN") String refreshToken) {
+                                               @CookieValue("refresh-token") String refreshToken) {
 
         JwtTokenDto jwtTokenDto = refreshTokenServiceImpl.refreshJwtToken(accessToken, refreshToken);
 
diff --git a/user-service/src/main/java/com/justpickup/userservice/global/utils/CookieProvider.java b/user-service/src/main/java/com/justpickup/userservice/global/utils/CookieProvider.java
index 3641bf0..3290a33 100644
--- a/user-service/src/main/java/com/justpickup/userservice/global/utils/CookieProvider.java
+++ b/user-service/src/main/java/com/justpickup/userservice/global/utils/CookieProvider.java
@@ -15,7 +15,7 @@ public class CookieProvider {
     public ResponseCookie createRefreshTokenCookie(String refreshToken) {
         return ResponseCookie.from("refresh-token", refreshToken)
                 .httpOnly(true)
-                .secure(true)
+                .secure(false)
                 .path("/")
                 .maxAge(Long.parseLong(refreshTokenExpiredTime)).build();
     }