fix: Security Config 수정

T1F5 · Apr 6, 2024 · b17701d · b17701d
1 parent 59f12eb
commit b17701d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/src/main/java/com/unit/daybook/domain/auth/service/TokenFilter.java b/src/main/java/com/unit/daybook/domain/auth/service/TokenFilter.java
@@ -18,6 +18,7 @@
 
 @Slf4j
 @RequiredArgsConstructor
+@Component
 public class TokenFilter extends OncePerRequestFilter {
 
 	private final SecurityService securityService;

diff --git a/src/main/java/com/unit/daybook/global/config/security/WebSecurityConfig.java b/src/main/java/com/unit/daybook/global/config/security/WebSecurityConfig.java
@@ -44,6 +44,7 @@ public class WebSecurityConfig {
 
 	private static final String[] permitAllUrl = {
 		"/",
+		"/auth/**",
 		"/index.html",
 		"/favicon.ico",
 		"/robots.txt",
@@ -81,8 +82,9 @@ public WebSecurityCustomizer configure() {
 	public CorsConfigurationSource corsConfigurationSource() {
 		CorsConfiguration configuration = new CorsConfiguration();
 
-		configuration.addAllowedOriginPattern(UrlConstants.PROD_DOMAIN_URL.getValue());
-		configuration.addAllowedOriginPattern(UrlConstants.LOCAL_DOMAIN_URL.getValue());
+		// configuration.addAllowedOriginPattern(UrlConstants.PROD_DOMAIN_URL.getValue());
+		// configuration.addAllowedOriginPattern(UrlConstants.LOCAL_DOMAIN_URL.getValue());
+		configuration.addAllowedOriginPattern("*");
 		configuration.addAllowedMethod("*");
 		configuration.addAllowedHeader("*");
 		configuration.setAllowCredentials(true);