SZUT/casino
4
1
Fork 0
Code Issues Pull requests 2 Releases 81 Packages 2 Wiki Activity Actions

feat(security): add frontend host configuration property
All checks were successful
CI / Get Changed Files (pull_request) Successful in 25s
Details
CI / eslint (pull_request) Has been skipped
Details
CI / prettier (pull_request) Has been skipped
Details
CI / test-build (pull_request) Has been skipped
Details
CI / Checkstyle Main (pull_request) Successful in 38s
Details

Browse source
This commit is contained in:
csimonis 2025-04-24 15:11:54 +02:00
parent 2ff25f9897
commit 237005a7bd
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
backend/src/main/java/de/szut/casino/security/SecurityConfig.java
View file

@ -1,5 +1,6 @@
package de.szut.casino.security;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.Customizer;
@ -17,6 +18,9 @@ import java.util.List;
@EnableWebSecurity
public class SecurityConfig {
@Value("${app.frontend-host}")
private String frontendHost;
@Bean
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
http
@ -36,7 +40,7 @@ public class SecurityConfig {
@Bean
public CorsConfigurationSource corsConfigurationSource() {
CorsConfiguration configuration = new CorsConfiguration();
configuration.setAllowedOrigins(List.of("http://localhost:4200"));
configuration.setAllowedOrigins(List.of(this.frontendHost));
configuration.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"));
configuration.setAllowedHeaders(Arrays.asList("authorization", "content-type", "x-auth-token", "Access-Control-Allow-Origin"));
configuration.setExposedHeaders(List.of("x-auth-token"));