test cors

Author: alankoo1995

backend/src/main/java/comp9323/group12/backend/config/SecurityConfig.java

@@ -50,7 +50,7 @@ protected void configure(HttpSecurity http) throws Exception {
               .logoutSuccessHandler(logoutSuccessHandler)
             .and()
             .authorizeRequests()
-              .antMatchers( "/api/unauthorized", "/api/signup", "/api/login").permitAll()
+              .antMatchers( "/api/unauthorized", "/api/signup", "/api/login", "/api/toppost").permitAll()
               .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
             .anyRequest().authenticated()
             .and().cors(Customizer.withDefaults());
@@ -61,11 +61,12 @@ CorsConfigurationSource corsConfigurationSource() {
     CorsConfiguration configuration = new CorsConfiguration();
     configuration.setAllowedOrigins(Arrays.asList("*"));
     configuration.setAllowedMethods(Arrays.asList("GET","POST", "OPTIONS", "PUT", "DELETE"));
-    configuration.setAllowedHeaders(Arrays.asList("X-Requested-With", "Origin", "Content-Type", "Accept",
-            "Authorization", "Access-Control-Allow-Credentials", "Access-Control-Allow-Headers", "Access-Control-Allow-Methods",
-            "Access-Control-Allow-Origin", "Access-Control-Expose-Headers", "Access-Control-Max-Age",
-            "Access-Control-Request-Headers", "Access-Control-Request-Method", "Age", "Allow", "Alternates",
-            "Content-Range", "Content-Disposition", "Content-Description"));
+//    configuration.setAllowedHeaders(Arrays.asList("X-Requested-With", "Origin", "Content-Type", "Accept",
+//            "Authorization", "Access-Control-Allow-Credentials", "Access-Control-Allow-Headers", "Access-Control-Allow-Methods",
+//            "Access-Control-Allow-Origin", "Access-Control-Expose-Headers", "Access-Control-Max-Age",
+//            "Access-Control-Request-Headers", "Access-Control-Request-Method", "Age", "Allow", "Alternates",
+//            "Content-Range", "Content-Disposition", "Content-Description"));
+    configuration.setAllowedHeaders(Arrays.asList("*"));
     configuration.setAllowCredentials(true);
     UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
     source.registerCorsConfiguration("/**", configuration);