When the CorsConfiguration
is configured to allow credentials you cannot use wildcards on the allowedOrigins
attribute.
The CorsConfiguration
itself asks to use the allowedOriginPatterns
when do you want to use wildcards and allow credentials at the same time.
However, there isn't a way to configure the allowedOriginPatterns
on the CorsEndpointProperties
.
I've just added the possibility to configure the allowedOriginPatterns
on the CorsEndpointProperties
.
Comment From: pivotal-issuemaster
@pedivo Please sign the Contributor License Agreement!
Click here to manually synchronize the status of this Pull Request.
See the FAQ for frequently asked questions.
Comment From: pivotal-issuemaster
@pedivo Thank you for signing the Contributor License Agreement!
Comment From: wilkinsona
Closed by https://github.com/spring-projects/spring-boot/commit/847bb62d6915aa65be270995ff6f2f318707f6a9 (unfortunately, I typo'd the issue reference).
@pedivo Thanks very much for making your first contribution to Spring Boot.