Closed
Description
Spring MVC provides HandlerMappingIntrospector
which exposes the HandlerMapping
s CORS configuration through the CorsConfigurationSource
interface. WebFlux allows users to register a CorsConfigurationSource
through AbstractHandlerMapping
, but does not provide a way for looking up the CORS configuration. This is important because in order for CORS to work with Spring Security the CorsWebFilter
needs to be placed after the headers but before authorization. We want to inject headers, but preflight requests will not contain credentials in them so all authorization will be rejected.
It would be nice if WebFlux allowed for exposing the CORS configuration similar to how MVC does.