Semmal/eeg_portal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(backend): fixed cors error on build dev environment

Browse source
This commit is contained in:
Bernhard Müller 2026-07-28 12:56:07 +02:00
parent abadc60ef0
commit 918249580b
2 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
eeg_backend/src/main/java/at/mueller/eeg/backend/iam/config/SecurityConfig.java
View file

@ -77,9 +77,7 @@ public class SecurityConfig {
@Bean @Bean
public JwtAuthenticationConverter jwtAuthenticationConverter() { public JwtAuthenticationConverter jwtAuthenticationConverter() {
JwtGrantedAuthoritiesConverter grantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter(); JwtGrantedAuthoritiesConverter grantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter();
// Hier sagst du Spring, wie das Feld in deinem JWT-Payload heißt (z.B. "role" oder "roles")
grantedAuthoritiesConverter.setAuthoritiesClaimName("role"); grantedAuthoritiesConverter.setAuthoritiesClaimName("role");
// Spring Security erwartet bei Rollen immer das Prefix "ROLE_"
grantedAuthoritiesConverter.setAuthorityPrefix("ROLE_"); grantedAuthoritiesConverter.setAuthorityPrefix("ROLE_");
JwtAuthenticationConverter jwtAuthenticationConverter = new JwtAuthenticationConverter(); JwtAuthenticationConverter jwtAuthenticationConverter = new JwtAuthenticationConverter();
@ -93,7 +91,7 @@ public class SecurityConfig {
@Bean @Bean
public CorsConfigurationSource corsConfigurationSource() { public CorsConfigurationSource corsConfigurationSource() {
CorsConfiguration configuration = new CorsConfiguration(); CorsConfiguration configuration = new CorsConfiguration();
configuration.setAllowedOrigins(Arrays.stream(corsOrigins.split(",")).map(String::trim).toList()); configuration.setAllowedOriginPatterns(Arrays.stream(corsOrigins.split(",")).map(String::trim).toList());
configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH")); configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH"));
configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "X-Access-Token")); configuration.setAllowedHeaders(Arrays.asList("Authorization", "Content-Type", "X-Access-Token"));
configuration.setAllowCredentials(true); configuration.setAllowCredentials(true);

5
eeg_backend/src/main/resources/application-dev.yml
View file

@ -12,7 +12,10 @@ spring:
jwt: jwt:
secret: dev-only-secret-do-not-use-in-production-2025 secret: dev-only-secret-do-not-use-in-production-2025
app: app:
cors-origins: http://localhost:4200,https://eeg.mueller-dev.com,https://*.eeg.mueller-dev.com cors-origins:
- http://localhost:4200
- https://eeg.mueller-dev.com
- https://*.eeg.mueller-dev.com
eda: eda:
simulation: simulation:
consent-delay-ms: 3000 consent-delay-ms: 3000