Merge pull request #173 from prgrms-web-devcourse-final-project/develop

서버 설정 변경
prgrms-web-devcourse-final-project · Feb 5, 2025 · f90e1fc · f90e1fc
2 parents ffc6a06 + 80f5c4c
commit f90e1fc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 6 deletions.
diff --git a/RevUp-common/src/main/java/com/revup/config/WebConfig.java b/RevUp-common/src/main/java/com/revup/config/WebConfig.java
@@ -36,8 +36,7 @@ public CorsConfigurationSource corsConfigurationSource() {
                 "https://revup-eight.vercel.app",
                 "https://revuprevup.o-r.kr",
                 githubPageUrl,
-                "http://localhost:3000",
-                "nginx"
+                "http://localhost:3000"
         ));
         configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"));
         // 허용할 요청 헤더 설정
@@ -52,9 +51,7 @@ public CorsConfigurationSource corsConfigurationSource() {
 
         // 필요한 헤더만 노출
         configuration.setExposedHeaders(List.of(
-//                "Authorization-refresh",
-                "Authorization",
-                "Set-Cookie"
+                "Cookie"
         ));
 
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();

diff --git a/RevUp-security/src/main/java/com/revup/config/SecurityConfig.java b/RevUp-security/src/main/java/com/revup/config/SecurityConfig.java
@@ -77,7 +77,7 @@ SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
                                                 securityUrlEndPoint.getUrl())
                                         .permitAll();
                             }
-                            authorizationManagerRequestMatcherRegistry.anyRequest().permitAll();
+                            authorizationManagerRequestMatcherRegistry.anyRequest().authenticated();
                         })
                 .oauth2Login(configure -> configure
                         .authorizationEndpoint(config -> config