From 022f8e40ba126f0cdf5978bc07b028828e56daf2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bernhard=20M=C3=BCller?= <postmuller@gmail.com>
Date: Tue, 28 Jul 2026 13:24:18 +0200
Subject: [PATCH] fix(backend): fixed cors error on build dev environment

---
 .../at/mueller/eeg/backend/iam/config/SecurityConfig.java   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java b/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java
index 3e7b99e..75cad0b 100644
--- a/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java
+++ b/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java
@@ -44,7 +44,7 @@ public class SecurityConfig {
     private String jwtSecret;
 
     @Value("${app.cors-origins:http://localhost:4200}")
-    private String corsOrigins;
+    private List<String> corsOrigins;
 
     @Bean
     public JwtDecoder jwtDecoder() {
@@ -95,7 +95,7 @@ public class SecurityConfig {
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
-        List<String> allowedPatterns = Arrays.stream(corsOrigins.split(","))
+        List<String> allowedPatterns = corsOrigins.stream()
                 .map(String::trim)
                 .flatMap(origin -> {
                     if (origin.contains("*")) {
@@ -111,7 +111,7 @@ public class SecurityConfig {
         configuration.setAllowCredentials(true);
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         source.registerCorsConfiguration("/**", configuration);
-        System.out.println("LOGGED CORS ORIGINS: " + corsOrigins);
+        System.out.println("LOGGED CORS ORIGINS: " + String.join(",", corsOrigins));
         return source;
     }