Merge pull request #97 from cathaaaaand/dev

CORS 정책 수정
cathaaaaand · Apr 29, 2024 · f5a763c · f5a763c
2 parents b9acef1 + 7881314
commit f5a763c
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/src/main/java/dnaaaaahtac/wooriforei/global/config/WebSecurityConfig.java b/src/main/java/dnaaaaahtac/wooriforei/global/config/WebSecurityConfig.java
@@ -18,7 +18,7 @@
 import org.springframework.web.cors.CorsConfigurationSource;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 
-import java.util.List;
+import java.util.Arrays;
 
 @Configuration
 @RequiredArgsConstructor
@@ -42,10 +42,7 @@ public JwtAuthorizationFilter jwtAuthorizationFilter() {
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration configuration = new CorsConfiguration();
         configuration.setAllowCredentials(true);
-
-        // TODO: 실제 배포 환경에서는 구체적인 도메인으로 제한해야 함
-        configuration.setAllowedOrigins(List.of("http://localhost:3000", "https://www.wooriforei.info"));
-
+        configuration.setAllowedOriginPatterns(Arrays.asList("http://localhost:3000", "https://www.wooriforei.info"));
         configuration.addAllowedHeader("*");
         configuration.addAllowedMethod("*");