@@ -28,14 +28,16 @@ public class CORSFilter extends OncePerRequestFilter {
28
28
protected void doFilterInternal (HttpServletRequest request , HttpServletResponse response , FilterChain filterChain )
29
29
throws ServletException , IOException {
30
30
// CORS "pre-flight" request
31
- response .addHeader ("Access-Control-Allow-Credentials" , "true" );
32
- response .addHeader ("Access-Control-Allow-Methods" , " OPTIONS" );
33
- response .addHeader ("Access-Control-Allow-Headers" , "Authorization" );
34
- response .addHeader ("Access-Control-Allow-Headers" , "Content-Type" );
31
+
35
32
response .addHeader ("Access-Control-Allow-Origin" , "*" );
36
- response .addHeader ("Access-Control-Max-Age" , "1" );
37
33
38
- if ("OPTIONS" .equalsIgnoreCase (request .getMethod ())) {
34
+ if ("OPTIONS" .equals (request .getMethod ())) {
35
+ response .addHeader ("Access-Control-Allow-Credentials" , "true" );
36
+ response .addHeader ("Access-Control-Allow-Methods" , "GET, POST, PUT, DELETE" );
37
+ response .addHeader ("Access-Control-Allow-Headers" , "Authorization" );
38
+ response .addHeader ("Access-Control-Allow-Headers" , "Content-Type" );
39
+ response .addHeader ("Access-Control-Max-Age" , "600" );
40
+
39
41
response .setStatus (HttpServletResponse .SC_OK );
40
42
return ;
41
43
}
0 commit comments