[fix] dev Swagger POST 테스트 시 CORS 403 해결 - #32
Conversation
dev Swagger(dev-api.gotggam.com)에서 Try it out으로 POST를 보내면 브라우저가 same-origin 요청에도 Origin 헤더를 붙이는데, dev의 allowed-origins에 dev-api.gotggam.com이 없어 Spring이 403(Invalid CORS request)으로 컷했다. API 자기 호스트를 허용 목록에 추가한다.
|
Warning Review limit reached
Next review available in: 60 minutes You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (1)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
📌 개요 (why, what)
dev Swagger(
dev-api.gotggam.com/swagger-ui)에서 설문 결과 제출(POST)을Try it out 하면 CORS 403이 발생하는 문제를 수정합니다.
Origin헤더를 붙임allowed-origins에dev-api.gotggam.com(API 자기 호스트)이 없어Spring이
403 Invalid CORS request로 컷 → 컨트롤러까지 도달 못 함(로그도 안 남음)🛠️ 구현 방법 (how)
application-dev.yaml의app.cors.allowed-origins에https://dev-api.gotggam.com추가gotggam.com은 이미 허용, prod Swagger POST 허용 여부는 별도 판단)