fix : (#29) cors

EntryDSM · Feb 12, 2025 · 3a19578 · 3a19578
1 parent aa70134
commit 3a19578
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/main/kotlin/entry/dsm/gitauth/equusgithubauth/global/config/SecurityConfig.kt b/src/main/kotlin/entry/dsm/gitauth/equusgithubauth/global/config/SecurityConfig.kt
@@ -22,8 +22,11 @@ class SecurityConfig(
     fun securityFilterChain(
         http: HttpSecurity,
         clientRegistrationRepository: ClientRegistrationRepository,
+        corsConfigurationSource: CorsConfigurationSource
     ): SecurityFilterChain {
         http
+            .cors { it.configurationSource(corsConfigurationSource) }
+            .csrf { it.disable() }
             .headers { it.frameOptions { frame -> frame.sameOrigin() } }
             .sessionManagement { it.sessionCreationPolicy(SessionCreationPolicy.STATELESS) }
             .authorizeHttpRequests { auth ->