From 1dcfac22485426f43df8a9b3813d6828cbd9b794 Mon Sep 17 00:00:00 2001
From: shinae1023 <shinae1023@naver.com>
Date: Sat, 16 May 2026 15:20:00 +0900
Subject: [PATCH] =?UTF-8?q?[Fix]=20cors=20=EC=84=A4=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../exception/handler/CustomAuthenticationEntryPoint.java      | 2 +-
 .../com/jobdri/jobdri_api/global/config/SecurityConfig.java    | 3 +++
 src/main/resources/application-prod.yaml                       | 1 +
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/main/java/com/jobdri/jobdri_api/global/apiPayload/exception/handler/CustomAuthenticationEntryPoint.java b/src/main/java/com/jobdri/jobdri_api/global/apiPayload/exception/handler/CustomAuthenticationEntryPoint.java
index 43c70d2..127f8a9 100644
--- a/src/main/java/com/jobdri/jobdri_api/global/apiPayload/exception/handler/CustomAuthenticationEntryPoint.java
+++ b/src/main/java/com/jobdri/jobdri_api/global/apiPayload/exception/handler/CustomAuthenticationEntryPoint.java
@@ -27,7 +27,7 @@ public class CustomAuthenticationEntryPoint implements AuthenticationEntryPoint
     public void commence(HttpServletRequest request, HttpServletResponse response,
                          AuthenticationException authException) throws IOException, ServletException {
 
-        log.error("인증되지 않은 사용자 접근: {}", authException.getMessage());
+        log.warn("인증되지 않은 사용자 접근: {} {} - {}", request.getMethod(), request.getRequestURI(), authException.getMessage());
 
         GeneralErrorCode errorCode = GeneralErrorCode.MISSING_AUTH_INFO;
 
diff --git a/src/main/java/com/jobdri/jobdri_api/global/config/SecurityConfig.java b/src/main/java/com/jobdri/jobdri_api/global/config/SecurityConfig.java
index 4159877..090319f 100644
--- a/src/main/java/com/jobdri/jobdri_api/global/config/SecurityConfig.java
+++ b/src/main/java/com/jobdri/jobdri_api/global/config/SecurityConfig.java
@@ -84,6 +84,9 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
     public CorsConfigurationSource corsConfigurationSource() {
         var config = new org.springframework.web.cors.CorsConfiguration();
         config.setAllowedOrigins(java.util.List.of(
+                "https://jobdri.site",
+                "https://www.jobdri.site",
+                "https://api.jobdri.site",
                 "http://localhost:5173",
                 "http://localhost:8080",
                 "http://localhost:3000"));
diff --git a/src/main/resources/application-prod.yaml b/src/main/resources/application-prod.yaml
index 7432cfe..48e5ca1 100644
--- a/src/main/resources/application-prod.yaml
+++ b/src/main/resources/application-prod.yaml
@@ -59,6 +59,7 @@ app:
 
 server:
   port: 8080
+  forward-headers-strategy: framework
 
 management:
   endpoints: