Remove duplicate CorsFilter and strip upstream CORS headers in gateway

Ya: 25 Aprili 2026, 22:39 UTC
Mwandishi: Kamo
Ahadi ya: 2c16fd4

WebConfig.java defined a second CorsFilter bean competing with CorsConfig.java's bean, risking duplicate header writes. Deleted it so only one CorsFilter exists. The forward() method also copied Access-Control-Allow-Origin from upstream service responses back to the browser, then the gateway's own CorsFilter added another copy — producing the duplicate header. Now all CORS headers are stripped from the upstream response before it is forwarded; the gateway's single CorsFilter writes them once.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru Milele Mtazamo wa bei