project update

- update spring-boot to 2.4.3;
- update mapstruct to 1.4.2.Final;
- update springdoc openapi to 1.5.5;
- update io.jsonwebtoken dependencies to 0.11.2;
- update npm dependencies to latest ones;
- set CORS AllowedOrigins as properties in application.yaml;
- exclude lombok from spring-boot-maven-plugin.

Author: Ivan Franchin

order-api/pom.xml

@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.4.1</version>
+        <version>2.4.3</version>
         <relativePath /> <!-- lookup parent from repository -->
     </parent>
 
@@ -17,9 +17,9 @@
 
     <properties>
         <java.version>11</java.version>
-        <jjwt.version>0.11.1</jjwt.version>
-        <org.mapstruct.version>1.4.1.Final</org.mapstruct.version>
-        <springdoc.openapi.version>1.5.1</springdoc.openapi.version>
+        <jjwt.version>0.11.2</jjwt.version>
+        <org.mapstruct.version>1.4.2.Final</org.mapstruct.version>
+        <springdoc.openapi.version>1.5.5</springdoc.openapi.version>
     </properties>
 
     <dependencies>
@@ -100,19 +100,25 @@
             <plugin>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-maven-plugin</artifactId>
+                <configuration>
+                    <excludes>
+                        <exclude>
+                            <groupId>org.projectlombok</groupId>
+                            <artifactId>lombok</artifactId>
+                        </exclude>
+                    </excludes>
+                </configuration>
             </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
                 <configuration>
                     <annotationProcessorPaths>
-                        <!-- Lombok -->
                         <path>
                             <groupId>org.projectlombok</groupId>
                             <artifactId>lombok</artifactId>
                             <version>${lombok.version}</version>
                         </path>
-                        <!-- MapStruct -->
                         <path>
                             <groupId>org.mapstruct</groupId>
                             <artifactId>mapstruct-processor</artifactId>

order-api/src/main/java/com/mycompany/orderapi/config/CorsConfig.java

@@ -1,7 +1,9 @@
 package com.mycompany.orderapi.config;
 
 import java.util.Collections;
+import java.util.List;
 
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.cors.CorsConfiguration;
@@ -12,11 +14,11 @@
 public class CorsConfig {
 
     @Bean
-    CorsFilter corsFilter() {
+    CorsFilter corsFilter(@Value("${app.cors.allowed-origins}") List<String> allowedOrigins) {
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
         CorsConfiguration config = new CorsConfiguration();
         config.setAllowCredentials(true);
-        config.setAllowedOrigins(Collections.singletonList("http://localhost:3000"));
+        config.setAllowedOrigins(allowedOrigins);
         config.setAllowedMethods(Collections.singletonList("*"));
         config.setAllowedHeaders(Collections.singletonList("*"));
         source.registerCorsConfiguration("/**", config);

order-api/src/main/resources/application.yml

@@ -16,3 +16,5 @@ app:
     secret: v9y$B&E)H@MbQeThWmZq4t7w!z%C*F-JaNdRfUjXn2r5u8x/A?D(G+KbPeShVkYp
     expiration:
       minutes: 10
+  cors:
+    allowed-origins: http://localhost:3000