From 45c5c7b97f3bdfd0e936686d631dbe7480141ddc Mon Sep 17 00:00:00 2001
From: guo <1716967236@qq.com>
Date: Sun, 26 Oct 2025 12:39:22 +0800
Subject: [PATCH] =?UTF-8?q?feat(N/A):=20=E4=BF=AE=E6=94=B9dev=E7=8E=AF?=
 =?UTF-8?q?=E5=A2=83=E7=9A=84cors=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../com/guo/learningprogresstracker/config/CorsProperties.java  | 1 +
 .../com/guo/learningprogresstracker/config/WebCorsConfig.java   | 2 +-
 src/main/resources/application-dev.yml                          | 1 +
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/java/com/guo/learningprogresstracker/config/CorsProperties.java b/src/main/java/com/guo/learningprogresstracker/config/CorsProperties.java
index f2731f2..91dacad 100644
--- a/src/main/java/com/guo/learningprogresstracker/config/CorsProperties.java
+++ b/src/main/java/com/guo/learningprogresstracker/config/CorsProperties.java
@@ -9,5 +9,6 @@ import org.springframework.context.annotation.Configuration;
 @ConfigurationProperties(prefix = "cors")
 public class CorsProperties {
     private String[] allowedOrigins;
+    private Boolean allowCredentials;
 
 }
diff --git a/src/main/java/com/guo/learningprogresstracker/config/WebCorsConfig.java b/src/main/java/com/guo/learningprogresstracker/config/WebCorsConfig.java
index 5fbd691..fbd16e3 100644
--- a/src/main/java/com/guo/learningprogresstracker/config/WebCorsConfig.java
+++ b/src/main/java/com/guo/learningprogresstracker/config/WebCorsConfig.java
@@ -24,6 +24,6 @@ public class WebCorsConfig implements WebMvcConfigurer {
                 .allowedOrigins(corsProperties.getAllowedOrigins())
                 .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")
                 .allowedHeaders("*")
-                .allowCredentials(true);
+                .allowCredentials(null == corsProperties.getAllowCredentials() || corsProperties.getAllowCredentials());
     }
 }
diff --git a/src/main/resources/application-dev.yml b/src/main/resources/application-dev.yml
index 35def61..7d8c2dc 100644
--- a/src/main/resources/application-dev.yml
+++ b/src/main/resources/application-dev.yml
@@ -9,6 +9,7 @@ server:
     port: 5155
 
 cors:
+    allowCredentials: false
     allowed-origins:
     - '*'