@@ -57,7 +57,11 @@ public class SpringSecurityConfiguration extends WebSecurityConfigurerAdapter {
"/api/receiveIDToken",
"/api/authenticate")
.permitAll() // authenticate
+ .and()
+ .authorizeRequests()
.requestMatchers(CorsUtils::isPreFlightRequest).permitAll()
.antMatchers("/api/**")
.authenticated()
.and()