archive
/
aqua
mirror of https://github.com/Soyandroid/aqua
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

Add the CORS header to the release version which I forgot

master
samnyan 2020-01-16 20:27:24 +09:00
parent 8287f1f0ba
commit a9a9ae4bbc
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/main/java/icu/samnyan/aqua/security/config/SecurityConfig.java
View File

@ -1,9 +1,15 @@
package icu.samnyan.aqua.security.config;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.CorsConfigurationSource;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import java.util.Arrays;
/**
* @author samnyan (privateamusement@protonmail.com)
@ -12,10 +18,22 @@ import org.springframework.security.config.annotation.web.configuration.WebSecur
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@Bean
CorsConfigurationSource corsConfigurationSource() {
CorsConfiguration config = new CorsConfiguration();
config.setAllowedOrigins(Arrays.asList("*"));
config.setAllowedHeaders(Arrays.asList("*"));
config.setAllowedMethods(Arrays.asList("GET", "PUT", "POST", "DELETE", "OPTIONS"));
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
source.registerCorsConfiguration("/api/**", config);
return source;
}
@Override
protected void configure(HttpSecurity http) throws Exception {
http
.headers().disable()
.cors().and()
.csrf().disable()
.authorizeRequests()
.anyRequest().permitAll();