CORS error fix

auth-service/src/main/java/com/itgura/authservice/controller/AdminController.java

@@ -11,7 +11,7 @@
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.*;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping("api/v1/auth-service-protected/admin")
 @RequiredArgsConstructor

auth-service/src/main/java/com/itgura/authservice/controller/AuthenticationController.java

@@ -15,7 +15,6 @@
 import org.springframework.web.bind.annotation.*;
 
 @RestController
-@CrossOrigin(origins = "*", allowedHeaders = "*")
 @RequestMapping("/api/v1/auth-service")
 @RequiredArgsConstructor
 public class AuthenticationController {

auth-service/src/main/java/com/itgura/authservice/controller/StudentController.java

@@ -4,7 +4,7 @@
 import org.springframework.web.bind.annotation.*;
 
 @RestController
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RequestMapping("api/v1/auth-service-protected/student")
 @RequiredArgsConstructor
 

auth-service/src/main/java/com/itgura/authservice/controller/TeacherController.java

@@ -7,7 +7,6 @@
 import org.springframework.web.bind.annotation.RestController;
 
 @RestController
-@CrossOrigin(origins = "*", allowedHeaders = "*")
 @RequestMapping("api/v1/auth-service-protected/admin/teacher")
 @RequiredArgsConstructor
 public class TeacherController {

dms-mediator/dms-mediator-all/src/main/java/com/itgura/controller/DmsController.java

@@ -13,7 +13,7 @@
 import org.springframework.web.bind.annotation.*;
 import org.springframework.web.multipart.MultipartFile;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.DMS_MEDIATOR)
 public class DmsController {

lms-gateway/src/main/java/com/itgura/lmsgateway/config/AppConfig.java

@@ -4,13 +4,17 @@
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.client.RestTemplate;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.reactive.CorsWebFilter;
+import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
 
 @Configuration
 public class AppConfig {
 
     @Bean
-
     public RestTemplate template() {
          return new RestTemplate();
     }
+
+
 }

lms-gateway/src/main/java/com/itgura/lmsgateway/config/CorsConfig.java

@@ -0,0 +1,31 @@
+package com.itgura.lmsgateway.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.cors.CorsConfiguration;
+import org.springframework.web.cors.reactive.CorsWebFilter;
+import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource;
+import org.springframework.web.reactive.config.CorsRegistry;
+import org.springframework.web.reactive.config.WebFluxConfigurer;
+
+
+@Configuration
+public class CorsConfig  {
+
+    @Bean
+    public CorsWebFilter corsWebFilter() {
+        CorsConfiguration corsConfiguration = new CorsConfiguration();
+        corsConfiguration.addAllowedOrigin("http://localhost:3000"); // Development
+        corsConfiguration.addAllowedOrigin("https://168.138.184.140"); // Production IP
+        corsConfiguration.addAllowedOrigin("https://itgura.lk"); // Production domain
+        corsConfiguration.addAllowedHeader("*"); // Allow all headers
+        corsConfiguration.addAllowedMethod("*"); // Allow all HTTP methods
+        corsConfiguration.setAllowCredentials(true); // Allow credentials like cookies
+        corsConfiguration.addExposedHeader("Authorization"); // Expose specific headers
+
+        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+        source.registerCorsConfiguration("/**", corsConfiguration);
+
+        return new CorsWebFilter(source);
+    }
+}

payment-service/src/main/java/com/itgura/paymentservice/controller/PaymentController.java

@@ -23,7 +23,7 @@
 import java.util.UUID;
 
 @RestController
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RequestMapping("/api/v1/payment-service")
 @RequiredArgsConstructor
 public class PaymentController {

payment-service/src/main/java/com/itgura/paymentservice/controller/PermissionController.java

@@ -16,7 +16,7 @@
 import java.util.List;
 
 @RestController
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.PAYMENT_SERVICE)
 @RequiredArgsConstructor
 public class PermissionController {

quiz-management/quiz-management-all/src/main/java/com/itgura/controller/AssignmentController.java

@@ -19,7 +19,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.QUIZ_SERVICE)
 public class AssignmentController {
@@ -71,6 +71,7 @@ public AppResponse<List<AssignmentSummaryDTO>> getAssignmentsByClassIds(@Request
             return AppResponse.error(null, e.getMessage(), "Server Error", "500", "");
         }
     }
+
     @PreAuthorize("hasAuthority('ROLE_ADMIN') or hasAuthority('ROLE_TEACHER')")
     @PatchMapping(ResourceManagementURI.ASSIGNMENT+ResourceManagementURI.ID+ResourceManagementURI.PUBLISH)
     public ResponseEntity<String> updateAssignmentPublishedStatus(@PathVariable UUID id, @RequestParam Boolean isPublished) {

quiz-management/quiz-management-all/src/main/java/com/itgura/controller/QuizController.java

@@ -2,7 +2,6 @@
 
 import com.itgura.dto.AppRequest;
 import com.itgura.dto.AppResponse;
-import com.itgura.request.CreateAssignmentRequest;
 import com.itgura.request.CreateQuizRequest;
 import com.itgura.request.QuizSubmissionRequest;
 import com.itgura.response.QuizResponse;
@@ -18,7 +17,7 @@
 
 import java.util.List;
 import java.util.UUID;
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.QUIZ_SERVICE)
 public class QuizController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/AnnouncementController.java

@@ -14,7 +14,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class AnnouncementController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/ClassController.java

@@ -17,7 +17,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class ClassController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/ContentController.java

@@ -15,7 +15,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 

resource-management/resource-management-all/src/main/java/com/itgura/controller/LessonController.java

@@ -16,7 +16,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class LessonController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/MaterialController.java

@@ -13,7 +13,7 @@
 
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class MaterialController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/MaterialTypeController.java

@@ -14,7 +14,7 @@
 
 import java.util.List;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class MaterialTypeController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/SessionController.java

@@ -15,7 +15,7 @@
 import java.util.List;
 import java.util.UUID;
 
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class SessionController {

resource-management/resource-management-all/src/main/java/com/itgura/controller/UserController.java

@@ -1,4 +1,5 @@
 package com.itgura.controller;
+
 import com.itgura.dto.AppResponse;
 import com.itgura.exception.ValueNotExistException;
 import com.itgura.request.UserDetailRequest;
@@ -9,8 +10,10 @@
 import com.itgura.util.URIPrefix;
 import jakarta.validation.Valid;
 import org.springframework.beans.factory.annotation.Autowired;
+
 import org.springframework.web.bind.annotation.*;
-@CrossOrigin(origins = "*", allowedHeaders = "*")
+
+
 @RestController
 @RequestMapping(URIPrefix.API + URIPrefix.V1 + URIPathVariable.RESOURCE_MANAGEMENT)
 public class UserController {
@@ -22,7 +25,7 @@ public AppResponse<UserDetailsResponse> getUserDetails(){
             UserDetailsResponse response = userService.findUser();
             return AppResponse.ok(response);
         }
-
+            
         catch (Exception e) {
             return AppResponse.error(null, e.getMessage(), "Server Error", "500", "");
         }
@@ -45,4 +48,4 @@ public AppResponse<UserDetailsResponse> updateUser(@RequestBody @Valid UserDetai
             return AppResponse.error(null, e.getMessage(), "Server Error", "500", "");
         }
     }
-}
+}

resource-management/resource-management-service/src/main/java/com/itgura/service/impl/MaterialServiceImpl.java

@@ -172,6 +172,8 @@ public String getVideoMaterialSignedUrl(SignedUrlRequest signedUrlRequest) throw
                 .keyPairId(keyPairId)
                 .privateKey(new ClassPathResource(privateKeyPath).getFile().toPath())
                 .build();
+
+
         SignedUrl signedUrl = cloudFrontUtilities.getSignedUrlWithCustomPolicy(customSignerRequest);
         return signedUrl.url();