fix : (#29) cors setting

EntryDSM · Feb 12, 2025 · 62be160 · 62be160
1 parent 30c521c
commit 62be160
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/src/main/kotlin/entry/dsm/gitauth/equusgithubauth/global/oauth/GithubOAuth2LoginConfig.kt b/src/main/kotlin/entry/dsm/gitauth/equusgithubauth/global/oauth/GithubOAuth2LoginConfig.kt
@@ -24,6 +24,8 @@ class GithubOAuth2LoginConfig {
         clientRegistrationRepository: ClientRegistrationRepository,
     ) {
         http
+            .cors { it.configurationSource(corsConfigurationSource()) }
+            .csrf { it.disable() }
             .oauth2Login { oauth ->
             oauth
                 .successHandler(githubAuthenticationSuccessHandler())
@@ -41,4 +43,17 @@ class GithubOAuth2LoginConfig {
                 }
         }
     }
+
+    @Bean
+    fun corsConfigurationSource(): CorsConfigurationSource {
+        val configuration = CorsConfiguration()
+        configuration.allowedOrigins = listOf("*")
+        configuration.allowedMethods = listOf("*")
+        configuration.allowedHeaders = listOf("*")
+        configuration.allowCredentials = true
+
+        val source = UrlBasedCorsConfigurationSource()
+        source.registerCorsConfiguration("/**", configuration)
+        return source
+    }
 }