Merge pull request #31 from FC-InnerCircle/main

stage 반영
FC-InnerCircle-ICD1 · Sep 12, 2024 · a0494f2 · a0494f2
2 parents a0015c6 + cf771db
commit a0494f2
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/main/kotlin/org/inner/circle/o2oserver/commons/security/SecurityConfig.kt b/src/main/kotlin/org/inner/circle/o2oserver/commons/security/SecurityConfig.kt
@@ -25,7 +25,7 @@ class SecurityConfig(
     fun filterChain(http: HttpSecurity): SecurityFilterChain {
         return http
             .csrf { csrf -> csrf.disable() }
-            .cors { cors -> cors.disable() }
+            .cors { cors -> cors.configurationSource(corsConfig()) }
             .httpBasic { httpBasic -> httpBasic.disable() }
             .sessionManagement { sessionManagement ->
                 sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
@@ -85,7 +85,10 @@ class SecurityConfig(
                         "Set-Cookie",
                     )
                 exposedHeaders = listOf("Authorization", "Set-Cookie")
-                allowedOriginPatterns = listOf("http://localhost:3000")
+                allowedOriginPatterns = listOf(
+                    "http://localhost:3000",
+                    "https://icd01-team01-o2o1-fe.vercel.app",
+                )
             }
         return UrlBasedCorsConfigurationSource().apply {
             registerCorsConfiguration("/**", config)