refactor: CORS 해제

Author: kimchanho97

src/main/java/com/burntoburn/easyshift/config/SecurityConfig.java

@@ -14,6 +14,11 @@
 import org.springframework.security.web.authentication.HttpStatusEntryPoint;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.CorsConfigurationSource;
+import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
+
+import java.util.Collections;
 
 @Configuration
 @EnableWebSecurity
@@ -41,6 +46,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
 
         http
                 .csrf(AbstractHttpConfigurer::disable)
+                .cors((cors) -> cors.configurationSource(corsConfigurationSource()))
                 .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
                 .formLogin(AbstractHttpConfigurer::disable)
                 .httpBasic(AbstractHttpConfigurer::disable)
@@ -75,6 +81,20 @@ private void configureAuthorization(AuthorizeHttpRequestsConfigurer<HttpSecurity
                 .anyRequest().permitAll();
     }
 
+    public CorsConfigurationSource corsConfigurationSource() {
+        CorsConfiguration configuration = new CorsConfiguration();
+        configuration.addAllowedHeader("*");  // 모든 헤더 허용
+        configuration.addAllowedMethod("*");  // 모든 HTTP 메서드 허용
+        configuration.setAllowedOriginPatterns(Collections.singletonList("*")); // 모든 Origin 허용
+        configuration.setAllowCredentials(true);  // 인증 정보 포함 가능 (쿠키 등)
+        configuration.setExposedHeaders(Collections.singletonList("Authorization"));  // 🔹 응답 헤더에서 Authorization 허용
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", configuration);
+        return source;
+    }
+
+
     // OAuth2 login configuration
 //    private void configureOAuth2Login(OAuth2LoginConfigurer<HttpSecurity> oauth2) {
 //        oauth2