fo bo 머지작업 - 오류수정

src/main/java/com/wb/domainserver/security/config/AdminWebMvcConfig.java

@@ -18,6 +18,7 @@ import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 @ComponentScan(basePackages = {
         "com.wb.domainserver.domain.mngr"
         , "com.wb.domainserver.domain.admin"
+        , "com.wb.domainserver.domain.crm"
         , "com.wb.domainserver.interceptor.mngr"
         , "com.wb.domainserver.util.file"
 //        , "com.wb.domainserver.domain.mq.controller"                /*ERP batch Controller 위치*/

src/main/java/com/wb/domainserver/security/config/ResourceServerConfig.java

@@ -40,6 +40,7 @@ import org.springframework.security.authorization.method.AuthorizationManagerBef
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.config.annotation.web.configurers.HeadersConfigurer;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.logout.LogoutFilter;
@@ -112,8 +113,9 @@ public class ResourceServerConfig {
         OrRequestMatcher resourceMatchers = new OrRequestMatcher(resourcePath);
 
         return http
-                .csrf(AbstractHttpConfigurer::disable)
                 .securityMatcher("/sopmal/**", "/oauth2/**", "/login/oauth2/**")
+                .headers((headers)->headers.frameOptions(HeadersConfigurer.FrameOptionsConfig::sameOrigin))
+                .csrf(AbstractHttpConfigurer::disable)
                 .authorizeHttpRequests(authorize ->
                         authorize
                                 .requestMatchers(authMatchers).authenticated()
@@ -144,7 +146,6 @@ public class ResourceServerConfig {
                         .deleteCookies("JSESSIONID")
                         .logoutSuccessHandler(new CustomLogoutSuccessHandler())
                 )
-
                 .build();
     }