search

atkaksoy501 / HealTripBackend

HealTrip
0 stars 1 forks source link

cors disabled #90

Closed atkaksoy501 closed 5 months ago

atkaksoy501 commented 5 months ago

Summary by CodeRabbit

coderabbitai[bot] commented 5 months ago

Sure! I'll provide you with the requested sections in the specified format. Let's start with the walkthrough, changes, and then a whimsical poem.

Walkthrough

The changes across the security components involve enhancing endpoint security by adding specific paths for authentication and registration, configuring CORS for cross-origin requests, and adjusting settings related to CORS and CSRF in the security filter chain setup.

Changes

File(s) Change Summary
SecurityManager.java Added /auth/authenticate, /auth/register, and /auth/register/patient to allowed paths for enhanced security.
CorsConfig.java Introduced CORS configuration allowing cross-origin requests with specified methods, headers, and caching settings.
SecurityConfig.java Updated CORS and CSRF settings by commenting out http.cors(AbstractHttpConfigurer::disable) and modifying it to http.csrf(AbstractHttpConfigurer::disable).

A rabbit hops with glee,\ Security tightened, oh what a spree!\ CORS dances with grace,\ CSRF finds its place.\ Changes made, in code we trust, embrace! 🐰✨

Tips ### Chat There are 3 ways to chat with [CodeRabbit](https://coderabbit.ai): - Review comments: Directly reply to a review comment made by CodeRabbit. Example: - `I pushed a fix in commit .` - `Generate unit testing code for this file.` - `Open a follow-up GitHub issue for this discussion.` - Files and specific lines of code (under the "Files changed" tab): Tag `@coderabbitai` in a new review comment at the desired location with your query. Examples: - `@coderabbitai generate unit testing code for this file.` - `@coderabbitai modularize this function.` - PR comments: Tag `@coderabbitai` in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples: - `@coderabbitai generate interesting stats about this repository and render them as a table.` - `@coderabbitai show all the console.log statements in this repository.` - `@coderabbitai read src/utils.ts and generate unit testing code.` - `@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.` Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. ### CodeRabbit Commands (invoked as PR comments) - `@coderabbitai pause` to pause the reviews on a PR. - `@coderabbitai resume` to resume the paused reviews. - `@coderabbitai review` to trigger a review. This is useful when automatic reviews are disabled for the repository. - `@coderabbitai resolve` resolve all the CodeRabbit review comments. - `@coderabbitai help` to get help. Additionally, you can add `@coderabbitai ignore` anywhere in the PR description to prevent this PR from being reviewed. ### CodeRabbit Configration File (`.coderabbit.yaml`) - You can programmatically configure CodeRabbit by adding a `.coderabbit.yaml` file to the root of your repository. - Please see the [configuration documentation](https://docs.coderabbit.ai/guides/configure-coderabbit) for more information. - If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: `# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json` ### Documentation and Community - Visit our [Documentation](https://coderabbit.ai/docs) for detailed information on how to use CodeRabbit. - Join our [Discord Community](https://discord.com/invite/GsXnASn26c) to get help, request features, and share feedback. - Follow us on [X/Twitter](https://twitter.com/coderabbitai) for updates and announcements.