samples: add cors exposed-headers for MCP inspector compatibility

Signed-off-by: Daniel Garnier-Moiroux <[email protected]>

Author: Kehrlann

samples/sample-mcp-server-secured-tools/src/main/java/org/springaicommunity/mcp/security/sample/server/securedtools/McpServerConfiguration.java

@@ -55,6 +55,7 @@ public CorsConfigurationSource corsConfigurationSource() {
 		configuration.setAllowedOriginPatterns(List.of("*"));
 		configuration.setAllowedMethods(List.of("*"));
 		configuration.setAllowedHeaders(List.of("*"));
+		configuration.setExposedHeaders(List.of("*"));
 		configuration.setAllowCredentials(true);
 
 		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

samples/sample-mcp-server/src/main/java/org/springaicommunity/mcp/security/sample/server/streamable/McpServerConfiguration.java

@@ -51,6 +51,7 @@ public CorsConfigurationSource corsConfigurationSource() {
 		configuration.setAllowedOriginPatterns(List.of("*"));
 		configuration.setAllowedMethods(List.of("*"));
 		configuration.setAllowedHeaders(List.of("*"));
+		configuration.setExposedHeaders(List.of("*"));
 		configuration.setAllowCredentials(true);
 
 		UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();