[Feat] https 적용에 따른 시큐리티 및 스웨거 설정 변경

src/main/java/savepay/savepay/config/SecurityConfig.java

@@ -152,7 +152,11 @@ public WebSecurityCustomizer webSecurityCustomizer() {
     public CorsConfigurationSource corsConfigurationSource() {
         CorsConfiguration config = new CorsConfiguration();
         // 개발용: 프론트 주소
-        config.setAllowedOrigins(List.of("http://localhost:5173"));
+        config.setAllowedOrigins(List.of(
+                "http://localhost:5173",  
+                "https://savepay.site",    // 배포 백엔드 주소
+                "https://www.savepay.site" // 배포 서브도메인
+        ));
         // 배포시: config.setAllowedOrigins(List.of("https://app.example.com"));
         config.setAllowedMethods(List.of("GET","POST","PUT","DELETE","PATCH","OPTIONS"));
         config.setAllowedHeaders(List.of("*"));

src/main/java/savepay/savepay/config/swagger/SwaggerConfig.java

@@ -5,6 +5,7 @@
 import io.swagger.v3.oas.models.info.Info;
 import io.swagger.v3.oas.models.security.SecurityRequirement;
 import io.swagger.v3.oas.models.security.SecurityScheme;
+import io.swagger.v3.oas.models.servers.Server;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 
@@ -16,6 +17,8 @@ public class SwaggerConfig {
     @Bean
     public OpenAPI openAPI() {
         return new OpenAPI()
+                .addServersItem(new Server().url("https://savepay.site"))
+                .addServersItem(new Server().url("https://www.savepay.site"))
                 .components(new Components()
                         .addSecuritySchemes(BEARER_KEY,
                                 new SecurityScheme()

src/main/java/savepay/savepay/global/WebConfig.java

@@ -1,6 +1,8 @@
 package savepay.savepay.global;
 
+import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.web.filter.ForwardedHeaderFilter;
 import org.springframework.web.method.support.HandlerMethodArgumentResolver;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 import savepay.savepay.global.security.resolver.UserInjectionArgumentResolver;
@@ -14,4 +16,9 @@ public class WebConfig implements WebMvcConfigurer {
     public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
         resolvers.add(new UserInjectionArgumentResolver());
     }
+
+    @Bean
+    public ForwardedHeaderFilter forwardedHeaderFilter() {
+        return new ForwardedHeaderFilter();
+    }
 }