Skip to content
Snippets Groups Projects
Commit ec67f9be authored by Daniel Gerhardt's avatar Daniel Gerhardt
Browse files

Adjust CORS config for API v3

parent dde371f3
Branches
No related merge requests found
...@@ -25,6 +25,7 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource; ...@@ -25,6 +25,7 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import java.util.List; import java.util.List;
public class CorsFilter extends org.springframework.web.filter.CorsFilter { public class CorsFilter extends org.springframework.web.filter.CorsFilter {
private static final String TOKEN_HEADER_NAME = "Arsnova-Auth-Token";
private final Logger logger = LoggerFactory.getLogger(CorsFilter.class); private final Logger logger = LoggerFactory.getLogger(CorsFilter.class);
public CorsFilter(List<String> origins) { public CorsFilter(List<String> origins) {
...@@ -43,9 +44,11 @@ public class CorsFilter extends org.springframework.web.filter.CorsFilter { ...@@ -43,9 +44,11 @@ public class CorsFilter extends org.springframework.web.filter.CorsFilter {
config.addAllowedHeader("Accept"); config.addAllowedHeader("Accept");
config.addAllowedHeader("Content-Type"); config.addAllowedHeader("Content-Type");
config.addAllowedHeader("X-Requested-With"); config.addAllowedHeader("X-Requested-With");
config.addAllowedHeader(TOKEN_HEADER_NAME);
config.addAllowedMethod("GET"); config.addAllowedMethod("GET");
config.addAllowedMethod("POST"); config.addAllowedMethod("POST");
config.addAllowedMethod("PUT"); config.addAllowedMethod("PUT");
config.addAllowedMethod("PATCH");
config.addAllowedMethod("DELETE"); config.addAllowedMethod("DELETE");
config.setAllowCredentials(true); config.setAllowCredentials(true);
source.registerCorsConfiguration("/**", config); source.registerCorsConfiguration("/**", config);
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment