cors is now enabled

FINTLabs · Jul 5, 2024 · 30841bb · 30841bb
1 parent c123932
commit 30841bb
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/no/fint/portal/ApplicationSecurity.java b/src/main/java/no/fint/portal/ApplicationSecurity.java
@@ -51,6 +51,7 @@ public AccessDecisionManager accessDecisionManager() {
     public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http
                 .csrf(AbstractHttpConfigurer::disable)
+                .cors().and()
                 .sessionManagement(AbstractHttpConfigurer::disable)
                 .addFilter(requestHeaderAuthenticationFilter(preAuthenticatedAuthenticationProvider()))
                 .authenticationProvider(preAuthenticatedAuthenticationProvider())