refactor: cors 허용 url pattern 프로파일화 (#443)

backend/src/main/java/com/woowacourse/zzimkkong/WebConfig.java

@@ -1,17 +1,30 @@
 package com.woowacourse.zzimkkong;
 
 import org.apache.http.HttpHeaders;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.servlet.config.annotation.CorsRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 
+import java.util.List;
+import java.util.stream.Collectors;
+import java.util.stream.Stream;
+
 @Configuration
 public class WebConfig implements WebMvcConfigurer {
+    private final List<String> allowOriginUrlPatterns;
+
+    public WebConfig(@Value("${cors.allow-origin.urls}") String allowOriginUrlPatterns) {
+        this.allowOriginUrlPatterns = Stream.of(allowOriginUrlPatterns.split(","))
+                .map(String::strip)
+                .collect(Collectors.toList());
+    }
+
     @Override
     public void addCorsMappings(CorsRegistry registry) {
         registry.addMapping("/**")
                 .allowedMethods("*")
-                .exposedHeaders(HttpHeaders.LOCATION);
-//                .allowedOriginPatterns("https://zzimkkong.com/");
+                .exposedHeaders(HttpHeaders.LOCATION)
+                .allowedOriginPatterns(allowOriginUrlPatterns.toArray(new String[0]));
     }
 }

backend/src/main/resources/application-dev.properties

@@ -24,3 +24,6 @@ cloud.aws.stack.auto=false
 
 # svg converter
 converter.temp.location=/home/ubuntu/zzimkkong/tmp/
+
+# cors (delimiter == ',')
+cors.allow-origin.urls=*

backend/src/main/resources/application-local.properties

@@ -31,3 +31,6 @@ cloud.aws.region.static=ap-northeast-2
 
 # svg converter
 converter.temp.location=src/main/resources/tmp/
+
+# cors (delimiter == ',')
+cors.allow-origin.urls=*

backend/src/main/resources/application-test.properties

@@ -23,3 +23,6 @@ cloud.aws.region.static=ap-northeast-2
 
 # svg converter
 converter.temp.location=src/main/resources/tmp/
+
+# cors (delimiter == ',')
+cors.allow-origin.urls=*