modification to cors filtering logic typo sec-fetch-site check

eclipse-kapua · Mar 27, 2023 · 4d65067 · 4d65067
1 parent aa5e04a
commit 4d65067
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...rest/filters/src/main/java/org/eclipse/kapua/commons/rest/filters/CORSResponseFilter.java b/...rest/filters/src/main/java/org/eclipse/kapua/commons/rest/filters/CORSResponseFilter.java
@@ -111,7 +111,7 @@ public void doFilter(ServletRequest request, ServletResponse response, FilterCha
         if (Strings.isNullOrEmpty(origin)) {
             logger.warn("'Origin' header not present in request: {} {}. User-Agent is: {}", httpRequest.getMethod(), httpRequest.getPathInfo(), httpRequest.getHeader(HttpHeaders.USER_AGENT));
         } else {
-            if (!"same-site".equals(fetchSite)) {
+            if (!"same-origin".equals(fetchSite)) {
                 // Origin header present, so it's a CORS request. Apply all the required logics
                 httpResponse.addHeader(HttpHeaders.ACCESS_CONTROL_ALLOW_METHODS, "GET, POST, DELETE, PUT");
                 httpResponse.addHeader(HttpHeaders.ACCESS_CONTROL_ALLOW_HEADERS, "X-Requested-With, Content-Type, Authorization");
@@ -130,7 +130,7 @@ public void doFilter(ServletRequest request, ServletResponse response, FilterCha
                     }
                 }
             } else {
-                logger.debug("HTTP same-site origin detected and allowed. Request: {} {}. User-Agent is: {}", httpRequest.getMethod(), httpRequest.getPathInfo(), httpRequest.getHeader(HttpHeaders.USER_AGENT));
+                logger.debug("HTTP sec-fetch-site same-origin detected and allowed. Request: {} {}. User-Agent is: {}", httpRequest.getMethod(), httpRequest.getPathInfo(), httpRequest.getHeader(HttpHeaders.USER_AGENT));
             }
         }
         int errorCode = httpResponse.getStatus();