fix: (#716) CorsFilter 기존과 동일하게 구성

woowacourse-teams · Oct 5, 2023 · 282af5a · 282af5a
1 parent 4bcf178
commit 282af5a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/backend/src/main/java/com/votogether/global/config/WebMvcConfig.java b/backend/src/main/java/com/votogether/global/config/WebMvcConfig.java
@@ -11,6 +11,7 @@
 import org.springframework.boot.web.servlet.FilterRegistrationBean;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpHeaders;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 import org.springframework.web.filter.CorsFilter;
@@ -37,9 +38,13 @@ public FilterRegistrationBean<CorsFilter> corsFilterRegistrationBean() {
         final CorsConfiguration config = new CorsConfiguration();
         config.setAllowCredentials(true);
         config.addAllowedOrigin(LOCALHOST_FRONTEND);
+        config.addAllowedOrigin(HTTPS_LOCALHOST_FRONTEND);
+        config.addAllowedOrigin(DEV_SERVER);
+        config.addAllowedOrigin(PROD_SERVER);
         config.addAllowedHeader("*");
         config.addAllowedMethod("*");
-        config.setMaxAge(6000L);
+        config.addExposedHeader(HttpHeaders.LOCATION);
+        config.addExposedHeader(HttpHeaders.SET_COOKIE);
 
         final UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         source.registerCorsConfiguration("/**", config);