Allow cors origins to be configured fix #376

Author: oliemansm

README.md

@@ -188,6 +188,8 @@ graphql:
            mapping: /graphql
            enabled: true
            corsEnabled: true
+           cors:
+              allowed-origins: http://some.domain.com
            # if you want to @ExceptionHandler annotation for custom GraphQLErrors
            exception-handlers-enabled: true
            contextSetting: PER_REQUEST_WITH_INSTRUMENTATION

graphql-spring-boot-autoconfigure/src/main/java/graphql/kickstart/spring/web/boot/GraphQLWebAutoConfiguration.java

@@ -65,6 +65,7 @@
 import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication;
 import org.springframework.boot.autoconfigure.jackson.JacksonAutoConfiguration;
+import org.springframework.boot.context.properties.ConfigurationProperties;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.boot.web.servlet.ServletRegistrationBean;
 import org.springframework.context.annotation.Bean;
@@ -141,12 +142,19 @@ public GraphQLErrorStartupListener graphQLErrorStartupListener() {
     return new GraphQLErrorStartupListener(errorHandlerSupplier, graphQLServletProperties.isExceptionHandlersEnabled());
   }
 
+  @Bean
+  @ConditionalOnClass(CorsFilter.class)
+  @ConfigurationProperties("graphql.servlet.cors")
+  public CorsConfiguration corsConfiguration() {
+    return new CorsConfiguration();
+  }
+
   @Bean
   @ConditionalOnClass(CorsFilter.class)
   @ConditionalOnProperty(value = "graphql.servlet.corsEnabled", havingValue = "true", matchIfMissing = true)
-  public CorsFilter corsConfigurer() {
+  public CorsFilter corsConfigurer(CorsConfiguration corsConfiguration) {
     Map<String, CorsConfiguration> corsConfigurations = new LinkedHashMap<>(1);
-    CorsConfiguration corsConfiguration = new CorsConfiguration().applyPermitDefaultValues();
+    corsConfiguration.applyPermitDefaultValues();
     corsConfigurations.put(graphQLServletProperties.getCorsMapping(), corsConfiguration);
 
     UrlBasedCorsConfigurationSource configurationSource = new UrlBasedCorsConfigurationSource();