fix/OPS-402: CORS 운영에 맞게 설정. (#181)

Kimgooner · web-flow · commit 71d22631b123 · 2025-10-14T11:44:48.000+09:00
diff --git a/src/main/java/org/tuna/zoopzoop/backend/global/security/SecurityConfig.java b/src/main/java/org/tuna/zoopzoop/backend/global/security/SecurityConfig.java
@@ -81,9 +81,10 @@ public class WebConfig implements WebMvcConfigurer {
         @Override
         public void addCorsMappings(CorsRegistry registry) {
             registry.addMapping("/api/v1/**")
-                    .allowedOrigins("*") // 실제 배포시엔 chrome-extension://<EXTENSION_ID> 로 제한 권장
+                    .allowedOrigins("https://www.zoopzoop.kro.kr")
                     .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")
-                    .allowedHeaders("*");
+                    .allowedHeaders("*")
+                    .allowCredentials(true);
         }
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -81,9 +81,10 @@ public class WebConfig implements WebMvcConfigurer {`
`81`	`81`	`@Override`
`82`	`82`	`public void addCorsMappings(CorsRegistry registry) {`
`83`	`83`	`registry.addMapping("/api/v1/**")`
`84`		`- .allowedOrigins("*") // 실제 배포시엔 chrome-extension://<EXTENSION_ID> 로 제한 권장`
	`84`	`+ .allowedOrigins("https://www.zoopzoop.kro.kr")`
`85`	`85`	`.allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")`
`86`		`- .allowedHeaders("*");`
	`86`	`+ .allowedHeaders("*")`
	`87`	`+ .allowCredentials(true);`
`87`	`88`	`}`
`88`	`89`	`}`
`89`	`90`	`}`