cors in spring security

Author: vcarluer

build.gradle.kts

@@ -123,7 +123,8 @@ subprojects {
     //  included dynamically if the 'platform' build property is 'azure'
     implementation("com.azure:azure-storage-blob-batch:12.9.1")
     implementation("org.springframework.boot:spring-boot-starter-security")
-    implementation("org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure:2.4.5")
+    implementation(
+        "org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure:2.4.5")
     implementation("org.springframework.security:spring-security-jwt:1.1.1.RELEASE")
     implementation("com.azure.spring:azure-spring-boot-starter-cosmos")
     implementation("com.azure.spring:azure-spring-boot-starter-storage")

common/src/main/kotlin/com/cosmotech/api/config/CsmSecurityConfiguration.kt

@@ -274,7 +274,8 @@ class CsmSecurityConfiguration(
   private val logger = LoggerFactory.getLogger(CsmSecurityConfiguration::class.java)
 
   override fun configure(http: HttpSecurity) {
-    http
+    http.cors()
+        .and()
         .authorizeRequests { requests ->
           requests.antMatchers(HttpMethod.OPTIONS, "/**").permitAll()