[CICD] nginx.conf 수정

Author: simhyunmin

nginx.conf

@@ -10,6 +10,19 @@ server {
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
 
     location / {
+        if ($request_method = 'OPTIONS') {
+                # 'http://localhost:3000' 및 'https://fitfit.site' 등을 직접 명시
+                add_header 'Access-Control-Allow-Origin' 'http://localhost:3000' always;
+                add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
+                add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type, *' always;
+                add_header 'Access-Control-Allow-Credentials' 'true' always;
+                return 204;
+            }
+
+        # 백엔드 응답이 돌아올 때도 CORS 헤더를 재전달/추가
+        add_header 'Access-Control-Allow-Origin' 'http://localhost:3000' always;
+        add_header 'Access-Control-Allow-Credentials' 'true' always;
+
          # 요청을 내부 스프링 앱(8080 포트)으로 전달하는 것은 동일합니다.
          proxy_pass http://127.0.0.1:8080;
          proxy_set_header Host $host;

src/main/java/fitfit/global/security/config/SecurityConfig.java

@@ -4,6 +4,7 @@
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
 import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
@@ -33,6 +34,7 @@ public SecurityFilterChain filterChain (HttpSecurity http) throws Exception {
                 .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers(
+                                HttpMethod.OPTIONS, "/**",
                                 "/swagger-ui.html",
                                 "/auth/**",
                                 "/swagger-ui/**",