From 1a859fc5b980c14e602e34f52263beec65757aba Mon Sep 17 00:00:00 2001
From: Nabil Derouiche <nabil.derouiche@gmail.com>
Date: Mon, 20 Apr 2026 22:20:03 +0100
Subject: [PATCH] fix: add api.bolbol.tn to CORS allowed origins

---
 .../src/main/java/com/rayhan/erp/config/WebSecurityConfig.java  | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java b/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
index ca0f20a..0833d47 100644
--- a/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
+++ b/backend/src/main/java/com/rayhan/erp/config/WebSecurityConfig.java
@@ -61,6 +61,8 @@ public class WebSecurityConfig {
         CorsConfiguration config = new CorsConfiguration();
         config.setAllowedOriginPatterns(List.of(
             "https://rayhan-erp.bolbol.tn",
+            "https://api.bolbol.tn",
+            "https://*.bolbol.tn",
             "http://localhost:*",
             "http://127.0.0.1:*"
         ));