Revize dbbad14d

re #37 modify CORS settings to allow only single domain and credentials in cors preflight requests

server/src/main/java/org/danekja/ymanager/RESTConfiguration.java

@@ -26 +26 @@
     @Override
     public void addCorsMappings(CorsRegistry registry) {
         registry.addMapping("/**")
-                .allowedMethods("GET", "POST", "PUT", "DELETE");
+                .allowedOrigins("http://localhost") //TODO replace with env variable
+                .allowedMethods("GET", "POST", "PUT", "DELETE")
+                .allowCredentials(true);
     }
 
     @Bean