From 005cd0d9063124a1dc51c84eacbe1f2f6438384f Mon Sep 17 00:00:00 2001 From: root Date: Sun, 14 Sep 2025 17:41:07 +0500 Subject: [PATCH] . --- .../kz/konturai/configuration/CorsConfig.java | 44 ------------------- .../security/SecurityConfig.java | 7 +-- 2 files changed, 2 insertions(+), 49 deletions(-) delete mode 100644 src/main/java/kz/konturai/configuration/CorsConfig.java diff --git a/src/main/java/kz/konturai/configuration/CorsConfig.java b/src/main/java/kz/konturai/configuration/CorsConfig.java deleted file mode 100644 index 9e564fc..0000000 --- a/src/main/java/kz/konturai/configuration/CorsConfig.java +++ /dev/null @@ -1,44 +0,0 @@ -package kz.konturai.configuration; - -import org.springframework.context.annotation.Bean; -import org.springframework.context.annotation.Configuration; -import org.springframework.web.cors.CorsConfiguration; -import org.springframework.web.cors.CorsConfigurationSource; -import org.springframework.web.cors.UrlBasedCorsConfigurationSource; - -import java.util.Arrays; - -@Configuration -public class CorsConfig { - - @Bean - public CorsConfigurationSource corsConfigurationSource() { - CorsConfiguration configuration = new CorsConfiguration(); - - // Allow requests from your frontend - configuration.setAllowedOriginPatterns(Arrays.asList( - "http://localhost:*", - "https://localhost:*", - "http://127.0.0.1:*", - "https://127.0.0.1:*", "https://konturai.kz:*")); - - // Allow all HTTP methods - configuration.setAllowedMethods(Arrays.asList( - "GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH")); - - // Allow all headers - configuration.setAllowedHeaders(Arrays.asList("*")); - - // Allow credentials (cookies, authorization headers) - configuration.setAllowCredentials(true); - - // Cache preflight response for 1 hour - configuration.setMaxAge(3600L); - - // Apply this configuration to all paths - UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); - source.registerCorsConfiguration("/**", configuration); - - return source; - } -} diff --git a/src/main/java/kz/konturai/configuration/security/SecurityConfig.java b/src/main/java/kz/konturai/configuration/security/SecurityConfig.java index f206844..67d3ca6 100644 --- a/src/main/java/kz/konturai/configuration/security/SecurityConfig.java +++ b/src/main/java/kz/konturai/configuration/security/SecurityConfig.java @@ -20,12 +20,10 @@ import org.springframework.web.cors.CorsConfigurationSource; public class SecurityConfig { private final JwtAuthenticationFilter jwtAuthenticationFilter; - private final CorsConfigurationSource corsConfigurationSource; - public SecurityConfig(JwtAuthenticationFilter jwtAuthenticationFilter, - CorsConfigurationSource corsConfigurationSource) { + public SecurityConfig(JwtAuthenticationFilter jwtAuthenticationFilter) { this.jwtAuthenticationFilter = jwtAuthenticationFilter; - this.corsConfigurationSource = corsConfigurationSource; + } @Bean @@ -41,7 +39,6 @@ public class SecurityConfig { response.getWriter().write("{\"message\":\"Forbidden\"}"); }; http - .cors(cors -> cors.configurationSource(corsConfigurationSource)) .csrf(csrf -> csrf.disable()) .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(auth -> auth