kevin/baron-sso
1
0
Fork 0
forked from baron/baron-sso
Code Pull Requests Activity

fix(infra): resolve CORS error and Nginx 502 Bad Gateway

Browse Source 
- Update Hydra and Kratos CORS config to specify allowed origins explicitly instead of using wildcard with allow_credentials: true
- Fix Nginx upstream resolution for Oathkeeper to use correct container hostname (ory_oathkeeper)
This commit is contained in:
조찬영
2026-04-24 11:59:49 +09:00
parent cfba44cec2
commit 8e28a9d74b
4 changed files with 29 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
docker/ory/hydra/hydra.yml
View File

@@ -7,7 +7,15 @@ serve:
cors:
enabled: true
allowed_origins:
- "*"
- http://localhost:5173
- http://localhost:5174
- http://localhost:5175
- http://localhost:5000
- https://ssologin.hmac.kr
- https://sso-test.hmac.kr
- https://app.brsw.kr
- https://sss.hmac.kr
- https://sso.hmac.kr
allowed_methods:
- POST
- GET
@@ -37,7 +45,15 @@ serve:
cors:
enabled: true
allowed_origins:
- "*"
- http://localhost:5173
- http://localhost:5174
- http://localhost:5175
- http://localhost:5000
- https://ssologin.hmac.kr
- https://sso-test.hmac.kr
- https://app.brsw.kr
- https://sss.hmac.kr
- https://sso.hmac.kr
allowed_methods:
- POST
- GET

9
docker/ory/kratos/kratos.yml
View File

@@ -8,8 +8,17 @@ serve:
cors:
enabled: true
allowed_origins:
- http://localhost:5173
- http://localhost:5174
- http://localhost:5175
- http://localhost:5000
- http://backend:3000
- http://baron_backend:3000
- https://ssologin.hmac.kr
- https://sso-test.hmac.kr
- https://app.brsw.kr
- https://sss.hmac.kr
- https://sso.hmac.kr
admin:
base_url: http://localhost:4434/

2
docker/ory/oathkeeper/rules.active.json
View File

@@ -156,4 +156,4 @@
"authorizer": { "handler": "allow" },
"mutators": [{ "handler": "noop" }]
}
]
]