From 22a2539cc26efa3a91ac47aab1f5a44703ce490d Mon Sep 17 00:00:00 2001
From: root <root@localhost>
Date: Sun, 14 Sep 2025 17:37:32 +0500
Subject: [PATCH] .

---
 .../api_gateway/configuration/CorsConfig.java | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 src/main/java/konturai/kz/api_gateway/configuration/CorsConfig.java

diff --git a/src/main/java/konturai/kz/api_gateway/configuration/CorsConfig.java b/src/main/java/konturai/kz/api_gateway/configuration/CorsConfig.java
new file mode 100644
index 0000000..067dcf6
--- /dev/null
+++ b/src/main/java/konturai/kz/api_gateway/configuration/CorsConfig.java
@@ -0,0 +1,32 @@
+package konturai.kz.api_gateway.configuration;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.reactive.CorsWebFilter;
+import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
+
+import java.util.Arrays;
+
+@Configuration
+public class CorsConfig {
+
+    @Bean
+    public CorsWebFilter corsWebFilter() {
+
+        CorsConfiguration corsConfig = new CorsConfiguration();
+        corsConfig.setAllowedOrigins(Arrays.asList(
+                "https://konturai.kz",
+                "http://localhost:5173" // Добавьте все нужные вам origin
+        ));
+        corsConfig.setMaxAge(3600L);
+        corsConfig.setAllowedMethods(Arrays.asList("GET", "POST", "PUT", "DELETE", "OPTIONS"));
+        corsConfig.addAllowedHeader("*");
+        corsConfig.setAllowCredentials(true);
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", corsConfig);
+
+        return new CorsWebFilter(source);
+    }
+}
\ No newline at end of file