From 10d18ac6c79dc388229c9c07495fe825d94d19f3 Mon Sep 17 00:00:00 2001 From: whitenoise13 Date: Mon, 12 May 2025 15:55:57 +0900 Subject: [PATCH] =?UTF-8?q?Feat::=20cors=EC=9D=98=EC=8B=AC=EB=90=98?= =?UTF-8?q?=EB=8A=94=20=EB=B6=80=EB=B6=84=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../global/config/SecurityConfig.java | 25 ++++++++++++++++--- 1 file changed, 21 insertions(+), 4 deletions(-) diff --git a/src/main/java/Minari/cheongForDo/global/config/SecurityConfig.java b/src/main/java/Minari/cheongForDo/global/config/SecurityConfig.java index 67348d5..e68660a 100644 --- a/src/main/java/Minari/cheongForDo/global/config/SecurityConfig.java +++ b/src/main/java/Minari/cheongForDo/global/config/SecurityConfig.java @@ -17,6 +17,7 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource; import java.util.Arrays; +import java.util.List; @Configuration @EnableWebSecurity @@ -44,13 +45,29 @@ public SecurityFilterChain filterChain(HttpSecurity http, JwtUtils jwtUtils) thr return http.build(); } +// @Bean +// public CorsConfigurationSource corsConfigurationSource() { +// CorsConfiguration configuration = new CorsConfiguration(); +// configuration.addAllowedOriginPattern("*"); // 허용할 도메인 설정 +// configuration.setAllowedMethods(Arrays.asList("*")); +// configuration.setAllowedHeaders(Arrays.asList("*")); +// configuration.setAllowCredentials(true); +// UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); +// source.registerCorsConfiguration("/**", configuration); +// return source; +// } + @Bean public CorsConfigurationSource corsConfigurationSource() { CorsConfiguration configuration = new CorsConfiguration(); - configuration.addAllowedOriginPattern("*"); // 허용할 도메인 설정 - configuration.setAllowedMethods(Arrays.asList("*")); - configuration.setAllowedHeaders(Arrays.asList("*")); - configuration.setAllowCredentials(true); + configuration.setAllowedOrigins(Arrays.asList( + "https://minari.vercel.app", + "https://new-mirari-web-git-home-joshmoon827s-projects.vercel.app" + )); + configuration.setAllowedMethods(List.of("*")); + configuration.setAllowedHeaders(List.of("*")); + configuration.setAllowCredentials(true); // 쿠키/세션 전송 허용 + UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); source.registerCorsConfiguration("/**", configuration); return source;