Adds cors support

README.md

@@ -106,6 +106,7 @@ server:
   port: 8082
   servlet:
     context-path: /
+  allowedOriginsUrls: ""
 ```
 
 #### Change the Context-Path
@@ -120,6 +121,17 @@ server:
 
 It is then available under http://localhost:8082/monitor.
 
+#### Cross Origin Requests
+
+To enable cors, add the allowed origins (`;` seperated) in the following property:
+
+``` 
+server:
+  allowedOriginsUrls: http://remote-hoste:8082;https://remote-hoste:8082
+```
+
+It is then available under http://localhost:8082/monitor.
+
 #### Customize the Look & Feel
 
 You can customize the look & feel of the Zeebe Simple Monitor (aka. white-labeling). For example, to change the logo or

src/main/java/io/zeebe/monitor/WebSocketConfig.java

@@ -1,5 +1,6 @@
 package io.zeebe.monitor;
 
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.messaging.simp.config.MessageBrokerRegistry;
 import org.springframework.web.socket.config.annotation.EnableWebSocketMessageBroker;
@@ -9,6 +10,9 @@
 @Configuration
 @EnableWebSocketMessageBroker
 public class WebSocketConfig implements WebSocketMessageBrokerConfigurer {
+  @Value("${server.allowedOriginsUrls}")
+  private String allowedOriginsUrls;
+
   @Override
   public void configureMessageBroker(MessageBrokerRegistry config) {
     config.enableSimpleBroker("/");
@@ -17,6 +21,11 @@ public void configureMessageBroker(MessageBrokerRegistry config) {
 
   @Override
   public void registerStompEndpoints(StompEndpointRegistry registry) {
-    registry.addEndpoint("/notifications").withSockJS();
+    if (this.allowedOriginsUrls != null && this.allowedOriginsUrls.length() > 0) {
+      String[] allowedOriginsUrlArr = this.allowedOriginsUrls.split(";");
+      registry.addEndpoint("/notifications").setAllowedOrigins(allowedOriginsUrlArr).withSockJS();
+    } else {
+      registry.addEndpoint("/notifications").withSockJS();
+    }
   }
 }

src/main/java/io/zeebe/monitor/ZeebeSimpleMonitorApp.java

@@ -17,24 +17,29 @@
 
 import com.samskivert.mustache.Mustache;
 import io.camunda.zeebe.spring.client.EnableZeebeClient;
+import java.util.concurrent.Executor;
+import java.util.concurrent.Executors;
+import java.util.concurrent.ScheduledExecutorService;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.context.annotation.Bean;
 import org.springframework.data.web.config.EnableSpringDataWebSupport;
 import org.springframework.scheduling.annotation.EnableAsync;
 import org.springframework.scheduling.annotation.EnableScheduling;
 import org.springframework.scheduling.concurrent.ThreadPoolTaskExecutor;
-
-import java.util.concurrent.Executor;
-import java.util.concurrent.Executors;
-import java.util.concurrent.ScheduledExecutorService;
+import org.springframework.web.servlet.config.annotation.CorsRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
 
 @SpringBootApplication
 @EnableZeebeClient
 @EnableScheduling
 @EnableAsync
 @EnableSpringDataWebSupport
 public class ZeebeSimpleMonitorApp {
+  @Value("${server.allowedOriginsUrls}")
+  private String allowedOriginsUrls;
 
   public static void main(final String... args) {
     SpringApplication.run(ZeebeSimpleMonitorApp.class, args);
@@ -60,4 +65,18 @@ public Mustache.Compiler configureFallbackValueForMissingVariablesInMustacheTemp
       Mustache.TemplateLoader templateLoader) {
     return Mustache.compiler().defaultValue("⍰").withLoader(templateLoader);
   }
+
+  @Bean
+  public WebMvcConfigurer corsConfigurer() {
+    String urls = this.allowedOriginsUrls;
+    return new WebMvcConfigurerAdapter() {
+      @Override
+      public void addCorsMappings(CorsRegistry registry) {
+        if (urls != null && urls.length() > 0) {
+          String[] allowedOriginsUrlArr = urls.split(";");
+          registry.addMapping("/**").allowedOrigins(allowedOriginsUrlArr);
+        }
+      }
+    };
+  }
 }

src/main/resources/application.yaml

@@ -34,6 +34,7 @@ server:
   port: 8082
   servlet:
     context-path: /
+  allowedOriginsUrls: ""
 
 logging:
   level: