Wildcard origin not allowed

2026-04-28 13:19:32 -05:00 · 2021-07-01 14:12:13 -05:00
parent 969064b532
commit ffbb194f94
1 changed files with 1 additions and 1 deletions
@@ -27,7 +27,7 @@ class WebFluxConfig : WebServerFactoryCustomizer<ConfigurableWebServerFactory>,

    override fun addCorsMappings(registry: CorsRegistry) {
        registry.addMapping("/**")
-                .allowedOrigins("*")
+                .allowedOrigins("https://discalbot.com", "https://www.discalbot.com", "https://dev.discalbot.com")
                .allowedMethods("GET", "POST", "OPTIONS")
                .allowedHeaders("Authorization", "Content-Type")
                .allowCredentials(true)