Merge pull request #2 from medizininformatik-initiative/fix-cors

add location header to exposed headers
medizininformatik-initiative · May 16, 2022 · 1421b69 · 1421b69
2 parents 00a36a0 + 9561be9
commit 1421b69
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 3 deletions.
diff --git a/ontology/ui_profiles/.gitkeep b/ontology/ui_profiles/.gitkeep
diff --git a/src/main/java/de/numcodex/feasibility_gui_backend/query/QueryHandlerRestController.java b/src/main/java/de/numcodex/feasibility_gui_backend/query/QueryHandlerRestController.java
@@ -26,8 +26,8 @@
 */
 @RequestMapping("api/v1/query-handler")
 @RestController
-@CrossOrigin
 @Slf4j
+@CrossOrigin(origins = "${cors.allowedOrigins}", exposedHeaders = "Location")
 public class QueryHandlerRestController {
 
   private final QueryHandlerService queryHandlerService;

diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
@@ -91,7 +91,6 @@ logging:
     org.springframework.web: ${LOG_LEVEL:warn}
 
 cors:
-  allowedOrigins:
-  - "*"
+  allowedOrigins: ${ALLOWED_ORIGINS:http://localhost}