diff --git a/src/main/java/org/sopt/app/common/config/WebSecurityConfig.java b/src/main/java/org/sopt/app/common/config/WebSecurityConfig.java index c10d8a78..11d09386 100755 --- a/src/main/java/org/sopt/app/common/config/WebSecurityConfig.java +++ b/src/main/java/org/sopt/app/common/config/WebSecurityConfig.java @@ -15,8 +15,6 @@ import org.springframework.security.web.firewall.DefaultHttpFirewall; import org.springframework.security.web.firewall.HttpFirewall; import org.springframework.web.cors.CorsConfiguration; -import org.springframework.web.cors.CorsConfigurationSource; -import org.springframework.web.cors.UrlBasedCorsConfigurationSource; @RequiredArgsConstructor @EnableWebSecurity @@ -50,7 +48,15 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { .httpBasic(AbstractHttpConfigurer::disable) .requestCache(RequestCacheConfigurer::disable) .formLogin(AbstractHttpConfigurer::disable) - .cors(cors -> cors.configurationSource(corsConfigurationSource())) + .cors(cors -> cors.configurationSource(req ->{ + CorsConfiguration configuration = new CorsConfiguration(); + configuration.setAllowedOrigins(List.of("*")); + configuration.setAllowedHeaders(List.of("*")); + configuration.setAllowedMethods(List.of("*")); + configuration.setAllowCredentials(true); + configuration.setMaxAge(3600L); + return configuration; + })) .sessionManagement(sessionManagementConfigurer -> sessionManagementConfigurer .sessionCreationPolicy(SessionCreationPolicy.STATELESS)) @@ -70,23 +76,6 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { return http.build(); } - @Bean - protected CorsConfigurationSource corsConfigurationSource() { - UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); - source.registerCorsConfiguration("/**", getDefaultCorsConfiguration()); - return source; - } - - private CorsConfiguration getDefaultCorsConfiguration() { - CorsConfiguration configuration = new CorsConfiguration(); - configuration.setAllowedOrigins(List.of("*")); - configuration.setAllowedHeaders(List.of("*")); - configuration.setAllowedMethods(List.of("*")); - configuration.setAllowCredentials(true); - configuration.setMaxAge(3600L); - return configuration; - } - @Bean public HttpFirewall defaultHttpFirewall() { return new DefaultHttpFirewall();