Merge pull request #145 from Malcom1986/cors

close#142 Fix cors error
Hexlet · Apr 24, 2023 · de08fe5 · de08fe5
2 parents 5652999 + ef9c7c2
commit de08fe5
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/src/main/java/io/hexlet/typoreporter/config/SecurityConfig.java b/src/main/java/io/hexlet/typoreporter/config/SecurityConfig.java
@@ -68,6 +68,7 @@ public SecurityContextRepository securityContextRepository() {
     public SecurityFilterChain filterChain(HttpSecurity http,
                                            SecurityContextRepository securityContextRepository) throws Exception {
         http.httpBasic();
+        http.cors();
 
         http.authorizeHttpRequests(authz -> authz
                 .requestMatchers(GET, "/webjars/**", "/widget/**", "/img/**").permitAll()

diff --git a/src/main/java/io/hexlet/typoreporter/web/WorkspaceApi.java b/src/main/java/io/hexlet/typoreporter/web/WorkspaceApi.java
@@ -13,6 +13,7 @@
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 import org.springframework.web.util.UriComponentsBuilder;
+import org.springframework.web.bind.annotation.CrossOrigin;
 
 import static org.springframework.http.ResponseEntity.created;
 
@@ -24,6 +25,11 @@ public class WorkspaceApi {
     private final TypoService service;
 
     @PostMapping("/typos")
+    // TODO: allow sending a request only from the pages specified in the Workspace settings
+    @CrossOrigin(
+        originPatterns = {"*"},
+        allowCredentials = "true"
+    )
     public ResponseEntity<ReportedTypo> addTypoReport(Authentication authentication,
                                                       @Valid @RequestBody TypoReport typoReport,
                                                       UriComponentsBuilder builder) {