From 51d63191210218436b2f24a38c951f030b24bb94 Mon Sep 17 00:00:00 2001
From: zyh <zhangyahao530@163.com>
Date: Sun, 24 Aug 2025 15:54:44 +0800
Subject: [PATCH] Update CORS configuration in SecurityConfig to enable custom
 settings

---
 .../server/config/CorsConfig.java             |  27 ++++++++++++++++++
 .../server/security/SecurityConfig.java       |   2 +-
 .../mapper/account/UserAccountMapper.class    | Bin 0 -> 455 bytes
 .../model/entity/account/UserAccount.class    | Bin 0 -> 2602 bytes
 .../mapper/account/UserAccountMapper.xml      |  25 ++++++++++++++++
 5 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 src/main/java/com/gameplatform/server/config/CorsConfig.java
 create mode 100644 target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class
 create mode 100644 target/classes/com/gameplatform/server/model/entity/account/UserAccount.class
 create mode 100644 target/classes/mapper/account/UserAccountMapper.xml

diff --git a/src/main/java/com/gameplatform/server/config/CorsConfig.java b/src/main/java/com/gameplatform/server/config/CorsConfig.java
new file mode 100644
index 0000000..020e167
--- /dev/null
+++ b/src/main/java/com/gameplatform/server/config/CorsConfig.java
@@ -0,0 +1,27 @@
+package com.gameplatform.server.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.reactive.CorsWebFilter;
+import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
+
+@Configuration
+public class CorsConfig {
+
+    @Bean
+    public CorsWebFilter corsWebFilter() {
+        CorsConfiguration config = new CorsConfiguration();
+        config.setAllowCredentials(true);
+        // 使用模式以允许携带凭证时的通配来源
+        config.addAllowedOriginPattern("*");
+        config.addAllowedHeader("*");
+        config.addAllowedMethod("*");
+        config.setMaxAge(3600L);
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", config);
+        return new CorsWebFilter(source);
+    }
+}
+
diff --git a/src/main/java/com/gameplatform/server/security/SecurityConfig.java b/src/main/java/com/gameplatform/server/security/SecurityConfig.java
index 8d77014..ad9807e 100644
--- a/src/main/java/com/gameplatform/server/security/SecurityConfig.java
+++ b/src/main/java/com/gameplatform/server/security/SecurityConfig.java
@@ -18,7 +18,7 @@ public class SecurityConfig {
     public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
         return http
                 .csrf(ServerHttpSecurity.CsrfSpec::disable)
-                .cors(ServerHttpSecurity.CorsSpec::disable)
+                .cors(cors -> {})
                 .httpBasic(ServerHttpSecurity.HttpBasicSpec::disable)
                 .formLogin(ServerHttpSecurity.FormLoginSpec::disable)
                 .authorizeExchange(ex -> ex
diff --git a/target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class b/target/classes/com/gameplatform/server/mapper/account/UserAccountMapper.class
new file mode 100644
index 0000000000000000000000000000000000000000..b5b52af014d11cc1bdf5d2b409018709693d1535
GIT binary patch
literal 455
zcmZ`#Jx{|x4D|)twB>UFb|fTNxD}~l2m@0p5CvwOi<@4R+(nm5r2I7oegHoT;j~pd
z6b8%B@1D=k{{H#=0)Trs2_X=0r)(iJEU3)U&#WtCMXn(y3oJ`csFbaZmv2l*D?C}g
zgs?B*bb$@Z98D&lk_9O*;B2N%`p|ZI!{0_GeQiq;@Npe)#Z&LJ$;P|PP5iGPn^G>x
zc<tN2T#ebyg#6s5&**rtCszp=)N3DWxbkxO!Yk>5-gTvuoHh-SG1jBk)^O`pY+WX?
zL^UU=6Q(PPTY+45@zh>}dCd!srnYv99(B&e`Odv=yY2e|1nlwo0R*3~2Ym=2<Z2ke
api3Mhj*EbG2ONhL^BXv1c*M^E9RC7z$A-!P

literal 0
HcmV?d00001

diff --git a/target/classes/com/gameplatform/server/model/entity/account/UserAccount.class b/target/classes/com/gameplatform/server/model/entity/account/UserAccount.class
new file mode 100644
index 0000000000000000000000000000000000000000..e20bf4587e589077e90ad817a943be1d6a9e7f98
GIT binary patch
literal 2602
zcmbW1SyK~15XXB0Bpk~b?)#Jkl=T+5ltToKNXhZOBr7bHWK+8vEWVXiX<6liAHWY~
z`R_^CBvZ35zD&>bbocybx_kco{q>uOHYw9iF=|Rsvq3Es7u0iY-B@PcDqfl&FRtxu
zASk}!6rEs8P*W;>-bSs|mY{ZnI>->Tnsp22rB$#?c`NwrdIi(By&Kyz3vSNNn|3j9
zf?LzdX5DfzFwd~LU6~7tIXN7cshyW`i<j#hzssO*>JijhhW+Vn$rjXCXLk~KPSvu{
zpk!!S1O~eg7&OSrj-2BI>-MOsA2w)&^+w6^{V%SUJFxsKb{I2goHv?1H!mYh8Z^a<
zxF1+S*=L&>gJ$`{oh8>P2L6tPC(26Wd4m?{o}jj@XIp`t+s2cPRB!{QV4E2?YvuQ_
zbBdL`U&^4g^eC5dcOK2VcrZcT8K-C;l?xZRxOI`2H)sEI%X4^LRW=7#jxT5}^S{r(
zE~w?w4i1rmzEryIab*&)=~p(BDRnP>j;wvKgDW?8Y<YOv!1jRBfoPoGO1k<RVpbCd
zBSftk4b;c3+Hmx{P@K=2Pi57GWA<uk71V{04T^499M>fnZwiw}O#(KbkZVB+>{VuM
z(4EM1BbCtJ&3iarea>-x4%nzNV6|Jz|JdFAH5GsYgnym!c=a7Lw)`9%`m9zc>|D2O
zKXJ=m*4}scHa&F>w!)1?Gbr5{8lAfw4U1WfdrL}mj+AH?DbXBKq8Fq@3rLB&ml9Pj
zC2ALPfKVkA$GC)*2`M03mVT1>Ce4;H@-~!oAEQy7KcE$?1Y90sY;^ukiLcm<QO&tm
z>->lw!-}2PAo+&zrR5)#P>=4D-h&kjsvON&{1$?qz^?@*1|jGvJ=5@Xsys<8&vSaA
z<LOj+`XhKaCm~O_<XP47^r}1qTAr7Bo?ew_FoK6`Bjia+o;58`zsfVD<yqJB^s79>
z5j<R@A<v-X+0gO~sXQZEo=rW^kjgU}!Na{0@{CBHEiKQe$}^_rd8OwWRe8oEc(`Xn
zo^i?ZTFWz`@=R!Xw)H#{D$isD5C0t@&y?iZ(f0ea$}^?q+12;^w8}Fb!NY%8$TKT>
z_UH{%>i;vR^2}&?_UWyz-{(}G*$5u~OGBOo$#bCPSyXxEv^<A;o<)^sK7xn;^pGbl
KdEQ}+(ffa}@p3i*

literal 0
HcmV?d00001

diff --git a/target/classes/mapper/account/UserAccountMapper.xml b/target/classes/mapper/account/UserAccountMapper.xml
new file mode 100644
index 0000000..18bbde8
--- /dev/null
+++ b/target/classes/mapper/account/UserAccountMapper.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.gameplatform.server.mapper.account.UserAccountMapper">
+    <resultMap id="UserAccountMap" type="com.gameplatform.server.model.entity.account.UserAccount">
+        <id property="id" column="id" />
+        <result property="userType" column="user_type" />
+        <result property="username" column="username" />
+        <result property="displayName" column="display_name" />
+        <result property="passwordHash" column="password_hash" />
+        <result property="role" column="role" />
+        <result property="status" column="status" />
+        <result property="pointsBalance" column="points_balance" />
+        <result property="createdAt" column="created_at" />
+        <result property="updatedAt" column="updated_at" />
+    </resultMap>
+
+    <select id="findByUsernameAndType" resultMap="UserAccountMap">
+        SELECT id, user_type, username, display_name, password_hash, role, status, points_balance, created_at, updated_at
+        FROM user_account
+        WHERE username = #{username}
+          AND user_type = #{userType}
+        LIMIT 1
+    </select>
+</mapper>
+