🚀 :: Api-v0.0.3-4

Gosrock · Jan 13, 2023 · f533fc3 · f533fc3
2 parents 2364e37 + a3bc0dc
commit f533fc3
Showing 1 changed file with 16 additions and 2 deletions.
diff --git a/DuDoong-Api/src/main/java/band/gosrock/api/config/security/CorsConfig.java b/DuDoong-Api/src/main/java/band/gosrock/api/config/security/CorsConfig.java
@@ -1,18 +1,32 @@
 package band.gosrock.api.config.security;
 
 
+import java.util.ArrayList;
+import java.util.Arrays;
+import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.core.env.Environment;
 import org.springframework.web.servlet.config.annotation.CorsRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 
 @Configuration
+@RequiredArgsConstructor
 public class CorsConfig implements WebMvcConfigurer {
+    private final Environment env;
 
     @Override
     public void addCorsMappings(CorsRegistry registry) {
+        String[] activeProfiles = env.getActiveProfiles();
+        ArrayList<String> allowedOriginPatterns = new ArrayList<>();
+        allowedOriginPatterns.add("dudoong.com");
+        if (!Arrays.stream(activeProfiles).toList().contains("prod")) {
+            allowedOriginPatterns.add("localhost");
+        }
+        String[] patterns = allowedOriginPatterns.toArray(String[]::new);
         registry.addMapping("/**")
                 .allowedMethods("*")
-                .allowedOrigins("*")
-                .exposedHeaders("Set-Cookie");
+                .allowedOriginPatterns(patterns)
+                .exposedHeaders("Set-Cookie")
+                .allowCredentials(true);
     }
 }