From c6e5174a52190b1dd072893c38ab17e75d181762 Mon Sep 17 00:00:00 2001 From: "Devloper.GOLF" Date: Fri, 11 Nov 2022 11:10:20 +0900 Subject: [PATCH] =?UTF-8?q?hotfix=20:=20cors=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../java/me/golf/blog/global/config/SecurityConfig.java | 6 +++--- src/main/java/me/golf/blog/global/config/WebConfig.java | 7 +++++-- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/src/main/java/me/golf/blog/global/config/SecurityConfig.java b/src/main/java/me/golf/blog/global/config/SecurityConfig.java index ea0ea2e..701bd83 100644 --- a/src/main/java/me/golf/blog/global/config/SecurityConfig.java +++ b/src/main/java/me/golf/blog/global/config/SecurityConfig.java @@ -78,9 +78,9 @@ public CustomAuthenticationProvider customAuthenticationProvider() { public CorsConfigurationSource corsConfigurationSource() { CorsConfiguration configuration = new CorsConfiguration(); - configuration.addAllowedOriginPattern("*"); - configuration.addAllowedHeader("*"); - configuration.addAllowedMethod("*"); + configuration.addAllowedOriginPattern(CorsConfiguration.ALL); + configuration.addAllowedHeader(CorsConfiguration.ALL); + configuration.addAllowedMethod(CorsConfiguration.ALL); configuration.setAllowCredentials(true); UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); diff --git a/src/main/java/me/golf/blog/global/config/WebConfig.java b/src/main/java/me/golf/blog/global/config/WebConfig.java index 355ccda..5c67626 100644 --- a/src/main/java/me/golf/blog/global/config/WebConfig.java +++ b/src/main/java/me/golf/blog/global/config/WebConfig.java @@ -1,6 +1,7 @@ package me.golf.blog.global.config; import org.springframework.context.annotation.Configuration; +import org.springframework.web.cors.CorsConfiguration; import org.springframework.web.servlet.config.annotation.CorsRegistry; import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; @@ -9,11 +10,13 @@ public class WebConfig implements WebMvcConfigurer { @Override public void addCorsMappings(CorsRegistry registry) { - registry.addMapping("/**") + registry.addMapping("/api/v2/**") .allowedOrigins("http://localhost:3000") .exposedHeaders("Authorization") .allowCredentials(true) - .allowedMethods("GET", "POST", "PUT", "PATCH", "DELETE") + .allowedMethods(CorsConfiguration.ALL) + .allowedOriginPatterns(CorsConfiguration.ALL) + .allowedHeaders(CorsConfiguration.ALL) .maxAge(3000); } } \ No newline at end of file