From 78c3292dd92de6b0d80ab9cf28880bdb7c15495d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bernhard=20M=C3=BCller?= Date: Tue, 28 Jul 2026 13:19:40 +0200 Subject: [PATCH] fix(backend): fixed cors error on build dev environment --- .../eeg/backend/iam/config/SecurityConfig.java | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java b/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java index e751ce4..3e7b99e 100644 --- a/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java +++ b/eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java @@ -32,6 +32,8 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource; import javax.crypto.spec.SecretKeySpec; import java.util.Arrays; +import java.util.List; +import java.util.stream.Stream; @Configuration @EnableWebSecurity @@ -93,13 +95,23 @@ public class SecurityConfig { @Bean public CorsConfigurationSource corsConfigurationSource() { CorsConfiguration configuration = new CorsConfiguration(); - configuration.setAllowedOriginPatterns(Arrays.stream(corsOrigins.split(",")).map(String::trim).toList()); + List allowedPatterns = Arrays.stream(corsOrigins.split(",")) + .map(String::trim) + .flatMap(origin -> { + if (origin.contains("*")) { + return Stream.of(origin, origin + ":*"); + } + return Stream.of(origin); + }) + .toList(); + + configuration.setAllowedOriginPatterns(allowedPatterns); configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH")); configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "X-Access-Token")); configuration.setAllowCredentials(true); UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); source.registerCorsConfiguration("/**", configuration); - + System.out.println("LOGGED CORS ORIGINS: " + corsOrigins); return source; }