Semmal/eeg_portal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(backend): fixed cors error on build dev environment

Browse source
This commit is contained in:
Bernhard Müller 2026-07-28 13:19:40 +02:00
parent b856d5d105
commit 78c3292dd9
1 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java
View file

@ -32,6 +32,8 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.util.Arrays; import java.util.Arrays;
import java.util.List;
import java.util.stream.Stream;
@Configuration @Configuration
@EnableWebSecurity @EnableWebSecurity
@ -93,13 +95,23 @@ public class SecurityConfig {
@Bean @Bean
public CorsConfigurationSource corsConfigurationSource() { public CorsConfigurationSource corsConfigurationSource() {
CorsConfiguration configuration = new CorsConfiguration(); CorsConfiguration configuration = new CorsConfiguration();
configuration.setAllowedOriginPatterns(Arrays.stream(corsOrigins.split(",")).map(String::trim).toList()); List<String> allowedPatterns = Arrays.stream(corsOrigins.split(","))
.map(String::trim)
.flatMap(origin -> {
if (origin.contains("*")) {
return Stream.of(origin, origin + ":*");
}
return Stream.of(origin);
})
.toList();
configuration.setAllowedOriginPatterns(allowedPatterns);
configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH")); configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH"));
configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "X-Access-Token")); configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "X-Access-Token"));
configuration.setAllowCredentials(true); configuration.setAllowCredentials(true);
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
source.registerCorsConfiguration("/**", configuration); source.registerCorsConfiguration("/**", configuration);
System.out.println("LOGGED CORS ORIGINS: " + corsOrigins);
return source; return source;
} }