👀 Views: 1868 💬 Answers: 1 📅 Created: 2025-06-22

spring-boot cors rest-api Java

I keep running into I'm building a Spring Boot REST API (version 2.5.6) that needs to be accessed by a frontend application hosted on a different domain... I've configured CORS in my application, but I'm still encountering issues when the frontend makes requests to the API. Specifically, I'm getting a `CORS policy: No 'Access-Control-Allow-Origin'` error in the browser console. I've tried adding a global CORS configuration by implementing the `WebMvcConfigurer` like this: ```java import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.web.servlet.config.annotation.CorsRegistry; import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; @Configuration public class WebConfig implements WebMvcConfigurer { @Override public void addCorsMappings(CorsRegistry registry) { registry.addMapping("/**").allowedOrigins("http://example-frontend.com").allowedMethods("GET", "POST", "PUT", "DELETE"); } } ``` Despite this, I'm still facing the same CORS error. I've also verified that my frontend is sending requests correctly and that it is indeed running on `http://example-frontend.com`. When I check the network tab in the developer tools, I see that the preflight OPTIONS request is not receiving the expected response headers. I've also tried using the `@CrossOrigin` annotation on specific controllers: ```java import org.springframework.web.bind.annotation.CrossOrigin; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RestController; @RestController @CrossOrigin(origins = "http://example-frontend.com") public class MyController { @GetMapping("/api/data") public String getData() { return "Hello World"; } } ``` However, this hasn't resolved the issue either. Any suggestions on what I might be missing or additional configurations I should consider? I need to ensure that the API is accessible from the frontend without compromising security. Thanks in advance!