/**
 * Cors全局配置
 *
 * @author 單紅宇
 * @since 2025/2/18 17:18
 */
@Data
@ConfigurationProperties("spring.web.globalcors")
public class GlobalCorsProperties {

    /**
     * 是否啟用 CORS 全局配置
     */
    private boolean enabled = false;

    /**
     * CORS 配置映射
     */
    private final Map<String, CorsConfiguration> corsConfigurations = new LinkedHashMap<>();
}

/**
 * 全局Cors配置
 *
 * @author 單紅宇
 * @since 2025/2/18 17:33
 */
@AutoConfiguration
@Import(GlobalCorsProperties.class)
@ConditionalOnClass(SimpleUrlHandlerMapping.class)
@ConditionalOnProperty(name = "spring.web.globalcors.enabled", havingValue = "true")
public class GlobalCorsAutoConfiguration implements InitializingBean {

    /**
     * RequestMappingHandlerMapping 實例
     */
    @Autowired
    private RequestMappingHandlerMapping requestMappingHandlerMapping;

    @Override
    public void afterPropertiesSet() throws Exception {
        // 獲取 GlobalCorsProperties 并設(shè)置 CORS 配置
        requestMappingHandlerMapping.setCorsConfigurations(SpringContextHolder.getApplicationContext()
                .getBean(GlobalCorsProperties.class).getCorsConfigurations());
    }
}

spring.web.globalcors.enabled=true
spring.web.globalcors.cors-configurations.[/**].allow-credentials=true
spring.web.globalcors.cors-configurations.[/**].allowed-headers=*
spring.web.globalcors.cors-configurations.[/**].allowed-methods=GET,POST,PUT,DELETE,OPTIONS
spring.web.globalcors.cors-configurations.[/**].allowed-origin-patterns=http://localhost:3000
spring.web.globalcors.cors-configurations.[/**].max-age=1800

META-INF/spring/org.springframework.boot.autoconfigure.AutoConfiguration.imports