|  | @@ -25,6 +25,7 @@ import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  import java.util.ArrayList;
 | 
	
		
			
				|  |  |  import java.util.Arrays;
 | 
	
		
			
				|  |  | +import java.util.Collections;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  /**
 | 
	
		
			
				|  |  |   * 配置Spring Security
 | 
	
	
		
			
				|  | @@ -135,8 +136,14 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
 | 
	
		
			
				|  |  |          corsConfiguration.setAllowedHeaders(Arrays.asList("*"));
 | 
	
		
			
				|  |  |          corsConfiguration.setAllowedMethods(Arrays.asList("*"));
 | 
	
		
			
				|  |  |          corsConfiguration.setMaxAge(3600L);
 | 
	
		
			
				|  |  | -        corsConfiguration.setAllowCredentials(true);
 | 
	
		
			
				|  |  | -        corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins());
 | 
	
		
			
				|  |  | +        if (userSetting.getAllowedOrigins() != null && !userSetting.getAllowedOrigins().isEmpty()) {
 | 
	
		
			
				|  |  | +            corsConfiguration.setAllowCredentials(true);
 | 
	
		
			
				|  |  | +            corsConfiguration.setAllowedOrigins(userSetting.getAllowedOrigins());
 | 
	
		
			
				|  |  | +        }else {
 | 
	
		
			
				|  |  | +            corsConfiguration.setAllowCredentials(false);
 | 
	
		
			
				|  |  | +            corsConfiguration.setAllowedOrigins(Collections.singletonList(CorsConfiguration.ALL));
 | 
	
		
			
				|  |  | +        }
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  |          corsConfiguration.setExposedHeaders(Arrays.asList(JwtUtils.getHeader()));
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |          UrlBasedCorsConfigurationSource url = new UrlBasedCorsConfigurationSource();
 |