Skip to content

Commit

Permalink
fix : security에 cors추가
Browse files Browse the repository at this point in the history
  • Loading branch information
minseok1015 committed Aug 16, 2024
1 parent 71cc07c commit ffd5904
Showing 1 changed file with 19 additions and 2 deletions.
21 changes: 19 additions & 2 deletions src/main/java/store/itpick/backend/config/SecurityConfig.java
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,11 @@
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;

import static org.springframework.security.config.Customizer.withDefaults;

@Configuration
@EnableWebSecurity
Expand All @@ -26,12 +31,24 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

http
.csrf(AbstractHttpConfigurer::disable)

.cors(withDefaults()) // CORS 설정 추가
.formLogin(FormLoginConfigurer::disable)

.sessionManagement((sessionManagement) ->
sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
);

return http.build();
}

@Bean
public CorsFilter corsFilter() {
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
CorsConfiguration config = new CorsConfiguration();
config.setAllowCredentials(true);
config.addAllowedOrigin("https://itpick.netlify.app");
config.addAllowedHeader("*");
config.addAllowedMethod("*");
source.registerCorsConfiguration("/**", config);
return new CorsFilter(source);
}
}

0 comments on commit ffd5904

Please sign in to comment.