Merge pull request #233 from InseeFr/fix/cors-headers

fix: cors headers
InseeFr · Apr 8, 2024 · 818bcd2 · 818bcd2
2 parents c625075 + 21b4efc
commit 818bcd2
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/pom.xml b/pom.xml
@@ -10,7 +10,7 @@
     <description>Modules for queen back-office</description>
 
     <properties>
-        <revision>4.2.3</revision>
+        <revision>4.2.5</revision>
         <changelist></changelist>
         <java.version>21</java.version>
         <maven.compiler.source>21</maven.compiler.source>

diff --git a/queen-application/pom.xml b/queen-application/pom.xml
@@ -192,7 +192,7 @@
 					<plugin>
 						<groupId>org.jacoco</groupId>
 						<artifactId>jacoco-maven-plugin</artifactId>
-						<version>0.8.11</version>
+						<version>0.8.12</version>
 						<executions>
 							<execution>
 								<id>report-aggregate</id>

diff --git a/queen-application/src/main/java/fr/insee/queen/application/configuration/CorsConfig.java b/queen-application/src/main/java/fr/insee/queen/application/configuration/CorsConfig.java
@@ -17,8 +17,8 @@ public class CorsConfig {
     protected CorsConfigurationSource corsConfigurationSource(ApplicationProperties applicationProperties) {
         CorsConfiguration configuration = new CorsConfiguration();
         configuration.setAllowedOriginPatterns(applicationProperties.corsOrigins());
-        configuration.setAllowedMethods(List.of("GET", "PUT", "POST", "DELETE", "OPTIONS"));
-        configuration.setAllowedHeaders(List.of("Authorization", "Content-Type"));
+        configuration.setAllowedMethods(List.of("GET", "PUT", "POST", "DELETE", "OPTIONS", "PATCH"));
+        configuration.setAllowedHeaders(List.of("Authorization", "Content-Type", "Access-Control-Allow-Origin"));
         configuration.addExposedHeader("Content-Disposition");
         configuration.setMaxAge(3600L);
         configuration.setAllowCredentials(true);