Merge pull request #4 from letsdev/3-add-cors-config-for-authorization-header

add authorization header to allowed headers for cors

Author: jgeissler-letsdev

basyx.common/basyx.http/src/main/java/org/eclipse/digitaltwin/basyx/http/BaSyxHTTPConfiguration.java

@@ -81,7 +81,8 @@ public Jackson2ObjectMapperBuilder jackson2ObjectMapperBuilder(List<Serializatio
 	@Bean
 	public WebMvcConfigurer corsConfigurer(List<CorsPathPatternProvider> configurationUrlProviders,
 										   @Value("${basyx.cors.allowed-origins:}") String[] allowedOrigins,
-										   @Value("${basyx.cors.allowed-methods:}") String[] allowedMethods) {
+										   @Value("${basyx.cors.allowed-methods:}") String[] allowedMethods,
+										   @Value("${basyx.cors.allowed-headers:}") String[] allowedHeaders) {
 		return new WebMvcConfigurer() {
 			@Override
 			public void addCorsMappings(CorsRegistry registry) {
@@ -91,15 +92,30 @@ public void addCorsMappings(CorsRegistry registry) {
 				logger.info("---- Configuring CORS ----");
 
 				for (CorsPathPatternProvider provider : configurationUrlProviders) {
-					configureOrigins(allowedOrigins, allowedMethods, registry, provider.getPathPattern());
+					configureOrigins(
+							allowedOrigins,
+							allowedMethods,
+							allowedHeaders,
+							registry,
+							provider.getPathPattern()
+					);
 				}
 			}
 
-			private void configureOrigins(String[] allowedOrigins, String[] allowedMethods, CorsRegistry registry, String pathPattern) {
+			private void configureOrigins(
+					String[] allowedOrigins,
+					String[] allowedMethods,
+					String[] allowedHeaders,
+					CorsRegistry registry,
+					String pathPattern
+			) {
 				logger.info(pathPattern + " configured with allowedOriginPatterns " + Arrays.toString(allowedOrigins));
 				logger.info(allowedMethods.length == 0 ? "No allowed methods configured" : pathPattern + " configured with allowedMethods " + Arrays.toString(allowedMethods));
 
-				registry.addMapping(pathPattern).allowedOriginPatterns(allowedOrigins).allowedMethods(allowedMethods);
+				registry.addMapping(pathPattern)
+						.allowedOriginPatterns(allowedOrigins)
+						.allowedMethods(allowedMethods)
+						.allowedHeaders(allowedHeaders);
 			}
 		};
 	}