https://dev-alxndr.github.io/posts/Spring-Security-CORS-Exception/