feat: flexibilisiere JWT-Validierung durch benutzerdefinierte Decoder und verbessere CORS-Konfiguration

2026-04-18 20:40:10 +02:00
parent 2bd2a26ab9
commit c29c8179a1
5 changed files with 104 additions and 15 deletions
@@ -44,6 +44,27 @@ spring:
          issuer-uri: ${SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER_URI:http://localhost:8180/realms/meldestelle}
          jwk-set-uri: ${SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWK_SET_URI:http://localhost:8180/realms/meldestelle/protocol/openid-connect/certs}

+gateway:
+  security:
+    cors:
+      allowed-origin-patterns:
+        - "http://localhost:*"
+        - "https://*.meldestelle.at"
+        - "https://*.mo-code.at"
+        - "https://*.postman.co"
+        - "postman://*"
+      allowed-methods:
+        - "GET"
+        - "POST"
+        - "PUT"
+        - "DELETE"
+        - "OPTIONS"
+        - "PATCH"
+      allowed-headers:
+        - "*"
+      allow-credentials: true
+      max-age: 3600s
+
 management:
  endpoints:
    web: