🚑 [HOTFIX] CORS 에러로 인해 권한 수정2

kchaeeun · Aug 19, 2024 · 7e3d4a2 · 7e3d4a2
1 parent 79b07c3
commit 7e3d4a2
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/majorLink/src/main/java/com/example/majorLink/global/config/SecurityConfig.java b/majorLink/src/main/java/com/example/majorLink/global/config/SecurityConfig.java
@@ -28,7 +28,6 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
         http
                 .httpBasic(AbstractHttpConfigurer::disable) // http form login 비활성화
                 .csrf(AbstractHttpConfigurer::disable) // csrf 필터 비활성화 -> cookies 사용하지 않으므로 위험 없음
-//                .cors(AbstractHttpConfigurer::disable)
                 .formLogin(AbstractHttpConfigurer::disable) // basic login 비활성화
                 .sessionManagement(sessionManagement -> sessionManagement.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) // session 사용 X
                 .addFilterBefore(new JwtAuthenticationFilter(jwtService), UsernamePasswordAuthenticationFilter.class)

diff --git a/majorLink/src/main/java/com/example/majorLink/global/config/WebConfig.java b/majorLink/src/main/java/com/example/majorLink/global/config/WebConfig.java
@@ -17,7 +17,7 @@ public void addCorsMappings(CorsRegistry registry) {
                         "http://localhost:3004"
                 ) //프론트 테스트 url입니다.
                 .allowedMethods("POST", "GET", "DELETE", "PUT", "PATCH", "OPTIONS")
-                .allowedHeaders("*")
+                .allowedHeaders("Content-Type", "Authorization")
                 .allowCredentials(true);
     }
 }