corsConfigurer.configurationSource(corsConfigurationSource())) ... return http.build(); } }"> corsConfigurer.configurationSource(corsConfigurationSource())) ... return http.build(); } }"> corsConfigurer.configurationSource(corsConfigurationSource())) ... return http.build(); } }">

[50] 트러블 슈팅 : CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource (allowedOrigins)


@Configuration
@EnableWebSecurity
@RequiredArgsConstructor
public class SecurityConfig {
    CorsConfigurationSource corsConfigurationSource() {
        return request -> {
            CorsConfiguration config = new CorsConfiguration();
            config.setAllowedHeaders(Collections.singletonList("*"));
            config.setAllowedMethods(Collections.singletonList("*"));
            config.setAllowedOriginPatterns(Collections.singletonList("*"));
            config.setAllowCredentials(true);
            return config;
        };
    }
    @Bean
    public SecurityFilterChain applicationSecurity(HttpSecurity http) throws Exception {
        http.cors(corsConfigurer -> corsConfigurer.configurationSource(corsConfigurationSource())) 
    ...
    return http.build();
    }
}