From def606a29b9773ad3872e4ab108b4fb4aa5d6eda Mon Sep 17 00:00:00 2001 From: pabloFuente Date: Sat, 18 Apr 2020 22:10:27 +0200 Subject: [PATCH] openvidu-server: CORS configuration updated --- .../openvidu/server/config/SecurityConfig.java | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java b/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java index 604fc520..74042b51 100644 --- a/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java +++ b/openvidu-server/src/main/java/io/openvidu/server/config/SecurityConfig.java @@ -17,13 +17,19 @@ package io.openvidu.server.config; +import java.util.Arrays; + import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.http.HttpMethod; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer; +import org.springframework.web.cors.CorsConfiguration; +import org.springframework.web.cors.UrlBasedCorsConfigurationSource; +import org.springframework.web.filter.CorsFilter; @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @@ -62,6 +68,17 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter { conf.and().httpBasic(); } + @Bean + public CorsFilter corsFilter() { + UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); + CorsConfiguration config = new CorsConfiguration(); + config.setAllowedOrigins(Arrays.asList("*")); + config.setAllowedHeaders(Arrays.asList("*")); + config.setAllowedMethods(Arrays.asList("*")); + source.registerCorsConfiguration("/**", config); + return new CorsFilter(source); + } + @Autowired public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception { auth.inMemoryAuthentication().withUser("OPENVIDUAPP").password("{noop}" + openviduConf.getOpenViduSecret())