wbrawner/twigs
1
0
Fork 0
Code Issues Pull requests 2 Projects Releases Packages 1 Wiki Activity Actions

Fix CORS

Browse source
This commit is contained in:
William Brawner 2020-02-14 21:29:40 -07:00
parent 9523dd5908
commit 98ca7bccca
1 changed files with 13 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
src/main/kotlin/com/wbrawner/budgetserver/config/SecurityConfig.kt
View file

@ -15,9 +15,9 @@ import org.springframework.security.config.annotation.web.configuration.WebSecur
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder
import org.springframework.security.crypto.password.PasswordEncoder import org.springframework.security.crypto.password.PasswordEncoder
import org.springframework.security.provisioning.JdbcUserDetailsManager import org.springframework.security.provisioning.JdbcUserDetailsManager
import org.springframework.web.cors.CorsConfiguration import org.springframework.web.servlet.config.annotation.CorsRegistry
import org.springframework.web.cors.UrlBasedCorsConfigurationSource import org.springframework.web.servlet.config.annotation.EnableWebMvc
import org.springframework.web.filter.CorsFilter import org.springframework.web.servlet.config.annotation.WebMvcConfigurer
import javax.sql.DataSource import javax.sql.DataSource
@ -50,18 +50,6 @@ open class SecurityConfig(
@Bean @Bean
get() = BCryptPasswordEncoder() get() = BCryptPasswordEncoder()
@Bean
open fun corsFilter(): CorsFilter? {
val source = UrlBasedCorsConfigurationSource()
val config = CorsConfiguration()
config.allowCredentials = true
config.addAllowedOrigin("*")
config.addAllowedHeader("*")
config.addAllowedMethod("*")
source.registerCorsConfiguration("/**", config)
return CorsFilter(source)
}
public override fun configure(auth: AuthenticationManagerBuilder?) { public override fun configure(auth: AuthenticationManagerBuilder?) {
auth!!.authenticationProvider(authenticationProvider) auth!!.authenticationProvider(authenticationProvider)
} }
@ -85,3 +73,13 @@ open class SecurityConfig(
@EnableGlobalMethodSecurity(prePostEnabled = true) @EnableGlobalMethodSecurity(prePostEnabled = true)
open class MethodSecurity : GlobalMethodSecurityConfiguration() open class MethodSecurity : GlobalMethodSecurityConfiguration()
@Configuration
@EnableWebMvc
open class CorsConfiguration : WebMvcConfigurer {
override fun addCorsMappings(registry: CorsRegistry) {
registry.addMapping("/**")
.allowedMethods("*")
.allowedHeaders("*")
.allowedOrigins("*")
}
}