From dc53a0287739fae8db2e4ade095360fa619368cc Mon Sep 17 00:00:00 2001 From: BelisAliosmanova Date: Wed, 11 Feb 2026 13:39:58 +0200 Subject: [PATCH] Enables CORS --- .../LifeAI/config/SecurityConfiguration.java | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/server/src/main/java/com/lifeAI/LifeAI/config/SecurityConfiguration.java b/server/src/main/java/com/lifeAI/LifeAI/config/SecurityConfiguration.java index 878e549..0f2da30 100644 --- a/server/src/main/java/com/lifeAI/LifeAI/config/SecurityConfiguration.java +++ b/server/src/main/java/com/lifeAI/LifeAI/config/SecurityConfiguration.java @@ -17,6 +17,11 @@ import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; import org.springframework.security.web.authentication.logout.LogoutHandler; +import org.springframework.web.cors.CorsConfiguration; +import org.springframework.web.cors.CorsConfigurationSource; +import org.springframework.web.cors.UrlBasedCorsConfigurationSource; + +import java.util.List; /** * Configuration class for setting up security configurations, including authentication, @@ -55,4 +60,20 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti return http.build(); } + + @Bean + public CorsConfigurationSource corsConfigurationSource() { + CorsConfiguration configuration = new CorsConfiguration(); + + configuration.setAllowedOriginPatterns(List.of("*")); // ✅ allow all (quick fix) + configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "OPTIONS")); + configuration.setAllowedHeaders(List.of("*")); + configuration.setAllowCredentials(true); + + UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); + source.registerCorsConfiguration("/**", configuration); + + return source; + } + }