corsDynamicOriginFilter.kt

// It's test code. Not working yet.

@Component
class CORSFilter : Filter {
    @Value("${cmdb.cors.allowedDomainPattern}")
    lateinit var allowedDomainPattern: String
    override fun doFilter(request: ServletRequest, response: ServletResponse, chain: FilterChain) {
        val res = response as HttpServletResponse
        if (!request.serverName.matches(allowedDomainPattern.toRegex())) {
            res.addHeader(HttpHeaders.VARY, "Origin")
            return
        }
        val allowedOrigin = "${request.scheme}://${request.serverName}:${request.serverPort}"
        res.addHeader(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN, allowedOrigin)
        chain.doFilter(request, response)
    }
    override fun destroy() {}
    override fun init(filterConfig: FilterConfig?) {}
}