add new available header
@@ -353,7 +353,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
Arrays.asList("GET", "POST", "OPTIONS", "DELETE", "PUT", "PATCH"));
configuration.setAllowedHeaders(
Arrays.asList(
- "X-Requested-With", "Origin", "Content-Type", "Accept", "Authorization"));
+ "X-Requested-With", "Origin", "Content-Type", "Accept", "Authorization", "Access-Control-Allow-Origin"));
configuration.setAllowCredentials(true);
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
source.registerCorsConfiguration("/**", configuration);
