55import inu .codin .codin .global .auth .filter .TokenValidationFilter ;
66import inu .codin .codin .global .auth .jwt .JwtTokenValidator ;
77import lombok .RequiredArgsConstructor ;
8+ import org .springframework .beans .factory .annotation .Value ;
89import org .springframework .context .annotation .Bean ;
910import org .springframework .context .annotation .Configuration ;
1011import org .springframework .security .access .hierarchicalroles .RoleHierarchy ;
@@ -31,8 +32,11 @@ public class SecurityConfig {
3132 private final JwtTokenValidator jwtTokenValidator ;
3233 private final CustomAccessDeniedHandler customAccessDeniedHandler ;
3334
35+ @ Value ("${server.domain}" )
36+ private String BASE_DOMAIN_URL ;
37+
3438 @ Bean
35- public SecurityFilterChain filterChain (HttpSecurity http , CorsConfigurationSource corsConfigurationSource ) throws Exception {
39+ public SecurityFilterChain filterChain (HttpSecurity http ) throws Exception {
3640 return http
3741 .cors (cors -> cors .configurationSource (corsConfigurationSource ()))
3842 .csrf (CsrfConfigurer ::disable )
@@ -67,7 +71,7 @@ public CorsConfigurationSource corsConfigurationSource() {
6771 CorsConfiguration config = new CorsConfiguration ();
6872
6973 config .setAllowCredentials (true );
70- config .setAllowedOrigins (List .of ("http://localhost:3000" , "https://front-end-dun-mu.vercel.app" ));
74+ config .setAllowedOrigins (List .of ("http://localhost:3000" , BASE_DOMAIN_URL , "https://front-end-dun-mu.vercel.app" ));
7175 config .setAllowedMethods (List .of ("GET" , "POST" , "PUT" , "DELETE" , "PATCH" , "OPTIONS" ));
7276 config .setAllowedHeaders (List .of ("*" ));
7377 config .setExposedHeaders (List .of ("*" ));
0 commit comments