Skip to content

[fix] dev Swagger POST 테스트 시 CORS 403 해결 - #32

Merged
gihhyeon merged 1 commit into
developfrom
fix/dev-swagger-cors
Aug 13, 2026
Merged

[fix] dev Swagger POST 테스트 시 CORS 403 해결#32
gihhyeon merged 1 commit into
developfrom
fix/dev-swagger-cors

Conversation

@gihhyeon

Copy link
Copy Markdown
Member
  • close #

📌 개요 (why, what)

dev Swagger(dev-api.gotggam.com/swagger-ui)에서 설문 결과 제출(POST)을
Try it out 하면 CORS 403이 발생하는 문제를 수정합니다.

  • 브라우저는 same-origin 요청이어도 POST/PUT/DELETE엔 Origin 헤더를 붙임
  • dev allowed-originsdev-api.gotggam.com(API 자기 호스트)이 없어
    Spring이 403 Invalid CORS request로 컷 → 컨트롤러까지 도달 못 함(로그도 안 남음)
  • GET은 same-origin 시 Origin 헤더가 없어 통과 → "POST만 실패"처럼 보였음

🛠️ 구현 방법 (how)

  • application-dev.yamlapp.cors.allowed-originshttps://dev-api.gotggam.com 추가
  • prod는 이번 범위 밖(운영 프론트 gotggam.com은 이미 허용, prod Swagger POST 허용 여부는 별도 판단)

dev Swagger(dev-api.gotggam.com)에서 Try it out으로 POST를 보내면
브라우저가 same-origin 요청에도 Origin 헤더를 붙이는데, dev의
allowed-origins에 dev-api.gotggam.com이 없어 Spring이 403(Invalid
CORS request)으로 컷했다. API 자기 호스트를 허용 목록에 추가한다.
@coderabbitai

coderabbitai Bot commented Aug 13, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@gihhyeon, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 60 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 3a1c7e7c-e27c-405a-b6b1-5c4ee07f463a

📥 Commits

Reviewing files that changed from the base of the PR and between cc6c4a8 and d5210fe.

📒 Files selected for processing (1)
  • src/main/resources/application-dev.yaml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@gihhyeon gihhyeon self-assigned this Aug 13, 2026
@gihhyeon gihhyeon added the ⚡ skip-review 스킵 리뷰 label Aug 13, 2026
@gihhyeon
gihhyeon merged commit 85cd905 into develop Aug 13, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

⚡ skip-review 스킵 리뷰

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant