hotfix : cors 추가

ilgolf · Nov 11, 2022 · c6e5174 · c6e5174
1 parent 5901341
commit c6e5174
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 5 deletions.
diff --git a/src/main/java/me/golf/blog/global/config/SecurityConfig.java b/src/main/java/me/golf/blog/global/config/SecurityConfig.java
@@ -78,9 +78,9 @@ public CustomAuthenticationProvider customAuthenticationProvider() {
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
 
-        configuration.addAllowedOriginPattern("*");
-        configuration.addAllowedHeader("*");
-        configuration.addAllowedMethod("*");
+        configuration.addAllowedOriginPattern(CorsConfiguration.ALL);
+        configuration.addAllowedHeader(CorsConfiguration.ALL);
+        configuration.addAllowedMethod(CorsConfiguration.ALL);
         configuration.setAllowCredentials(true);
 
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

diff --git a/src/main/java/me/golf/blog/global/config/WebConfig.java b/src/main/java/me/golf/blog/global/config/WebConfig.java
@@ -1,6 +1,7 @@
 package me.golf.blog.global.config;
 
 import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.servlet.config.annotation.CorsRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 
@@ -9,11 +10,13 @@ public class WebConfig implements WebMvcConfigurer {
 
     @Override
     public void addCorsMappings(CorsRegistry registry) {
-        registry.addMapping("/**")
+        registry.addMapping("/api/v2/**")
                 .allowedOrigins("http://localhost:3000")
                 .exposedHeaders("Authorization")
                 .allowCredentials(true)
-                .allowedMethods("GET", "POST", "PUT", "PATCH", "DELETE")
+                .allowedMethods(CorsConfiguration.ALL)
+                .allowedOriginPatterns(CorsConfiguration.ALL)
+                .allowedHeaders(CorsConfiguration.ALL)
                 .maxAge(3000);
     }
 }