Merge pull request #165 from linkloud/refactor/securityCors

refactor:cors settings
linkloud · Oct 7, 2023 · 145c9d0 · 145c9d0
2 parents 982ad00 + 97f48c3
commit 145c9d0
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 21 deletions.
diff --git a/backend/src/main/java/io/linkloud/api/global/config/CorsConfig.java b/backend/src/main/java/io/linkloud/api/global/config/CorsConfig.java
diff --git a/backend/src/main/java/io/linkloud/api/global/security/SecurityConfig.java b/backend/src/main/java/io/linkloud/api/global/security/SecurityConfig.java
@@ -29,7 +29,7 @@ public class SecurityConfig {
     @Bean
     public SecurityFilterChain configure(HttpSecurity http) throws Exception {
         return http
-            .cors()
+            .cors().configurationSource(corsConfigurationSource())
             .and()
             .csrf().disable()
             .formLogin().disable()
@@ -60,9 +60,11 @@ public SecurityFilterChain configure(HttpSecurity http) throws Exception {
     @Bean
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
-        configuration.setAllowedOrigins(List.of("https://linkloud.io"));
-        configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "PATCH"));
-        configuration.setAllowedHeaders(List.of("*"));
+        configuration.addAllowedOrigin("https://linkloud.io");
+        configuration.addAllowedOrigin("http://localhost:5173");
+
+        configuration.addAllowedMethod("*"); // 모든 메소드 허용.
+        configuration.addAllowedHeader("*");
         configuration.setAllowCredentials(true);
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         source.registerCorsConfiguration("/**", configuration);