1111import  org .springframework .security .oauth2 .core .ClientAuthenticationMethod ;
1212import  org .springframework .security .config .annotation .web .builders .HttpSecurity ;
1313import  org .springframework .security .web .SecurityFilterChain ;
14- import  org .springframework .security .config .Customizer ;
1514import  org .springframework .security .config .annotation .web .configurers .AbstractHttpConfigurer ;
16- import  lombok .RequiredArgsConstructor ;
1715import  org .springframework .security .config .http .SessionCreationPolicy ;
1816import  org .springframework .web .cors .CorsConfiguration ;
1917import  org .springframework .web .cors .CorsConfigurationSource ;
2018import  org .springframework .web .cors .UrlBasedCorsConfigurationSource ;
2119import  java .util .Arrays ;
2220import  java .util .Collections ;
2321
22+ import  static  org .springframework .security .config .Customizer .withDefaults ;
23+ 
2424@ Configuration 
2525@ EnableWebSecurity 
26- @ RequiredArgsConstructor 
2726public  class  OAuth2Config  {
2827
2928    @ Bean 
3029    public  CorsConfigurationSource  corsConfigurationSource () {
3130        CorsConfiguration  configuration  = new  CorsConfiguration ();
32-         configuration .addAllowedOriginPattern ("*" );
31+         configuration .setAllowedOrigins (Arrays .asList (
32+             "http://localhost:8080" ,
33+             "http://127.0.0.1:8080" ,
34+             "http://locationcheckgo.netlify.app" 
35+         ));
3336        configuration .setAllowedMethods (Arrays .asList (
3437            "GET" , "POST" , "PUT" , "DELETE" , "OPTIONS" , "HEAD" , "PATCH" , "TRACE" , "CONNECT" 
3538        ));
@@ -48,10 +51,19 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
4851        http 
4952            .csrf (AbstractHttpConfigurer ::disable )
5053            .cors (cors  -> cors .configurationSource (corsConfigurationSource ()))
54+             .sessionManagement (session  -> session .sessionCreationPolicy (SessionCreationPolicy .STATELESS ))
5155            .authorizeHttpRequests (auth  -> auth 
56+                 .requestMatchers ("/**" ).permitAll ()
5257                .anyRequest ().permitAll ()
5358            )
54-             .oauth2Login (Customizer .withDefaults ());
59+             .oauth2Login (oauth2  -> oauth2 
60+                 .authorizationEndpoint (authorization  -> authorization 
61+                     .baseUri ("/oauth2/authorization" )
62+                 )
63+                 .redirectionEndpoint (redirection  -> redirection 
64+                     .baseUri ("/login/oauth2/code/*" )
65+                 )
66+             );
5567        return  http .build ();
5668    }
5769
0 commit comments