From f92c458a6bfe38dcc2c3fdca56d73b282f31df59 Mon Sep 17 00:00:00 2001
From: Cavin <cavinlarry001@gmail.com>
Date: Tue, 14 Jul 2026 13:00:05 +0300
Subject: [PATCH] fix: update CORS configuration to accept a single origin as a
 list and correct frontend demo link in README

---
 README.md                                     | 24 ++++++++++++-------
 .../backend/security/SecurityConfig.kt        |  5 ++--
 2 files changed, 19 insertions(+), 10 deletions(-)

diff --git a/README.md b/README.md
index 2465439..c010812 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,18 @@
-<div align="center" style="justify-content: center; display: flex;">
-
-[![Backend CI](https://github.com/devcavin/gatelog/actions/workflows/backend-ci.yaml/badge.svg)](https://github.com/devcavin/gatelog/actions/workflows/backend-ci.yaml)
-
-[![Deploy to Render](https://github.com/devcavin/gatelog/actions/workflows/deploy-render.yaml/badge.svg)](https://github.com/devcavin/gatelog/actions/workflows/deploy-render.yaml)
-
-[![Frontend CI](https://github.com/devcavin/gatelog/actions/workflows/frontend-ci.yaml/badge.svg)](https://github.com/devcavin/gatelog/actions/workflows/frontend-ci.yaml)
+<div align="center">
+
+![License](https://img.shields.io/badge/license-MIT-blue.svg)
+![TypeScript](https://img.shields.io/badge/TypeScript-5.2.2-blue.svg)
+![Kotlin](https://img.shields.io/badge/kotlin-2.2.1-purple.svg)
+![React](https://img.shields.io/badge/React-18.2.0-blue.svg)
+![Spring Boot](https://img.shields.io/badge/Spring%20Boot-3.5.13-brightgreen.svg)
+![PostgreSQL](https://img.shields.io/badge/PostgreSQL-16-blue.svg)
+![Supabase](https://img.shields.io/badge/Supabase-3.0.0-blue.svg)
+![Render](https://img.shields.io/badge/Render-2023.2.0-blue.svg)
+![Backend CI](https://github.com/devcavin/gatelog/actions/workflows/backend-ci.yaml/badge.svg)
+![Frontend CI](https://github.com/devcavin/gatelog/actions/workflows/frontend-ci.yaml/badge.svg)
+![Deploy to Render](https://github.com/devcavin/gatelog/actions/workflows/deploy-render.yaml/badge.svg)
+![GitHub Repo Size](https://img.shields.io/github/repo-size/devcavin/gatelog?color=blue)
+![Stars](https://img.shields.io/github/stars/devcavin/gatelog?color=yellow)
 
 </div>
 
@@ -22,7 +30,7 @@ The project is built to demonstrate end-to-end product engineering: system desig
 ---
 
 ## Live Demo
-- Frontend - [htts://gatelogapp.vercel.app](htts://gatelogapp.vercel.app)
+- Frontend - [https://gatelogapp.vercel.app](https://gatelogapp.vercel.app)
 
 ---
 
diff --git a/backend/src/main/kotlin/io/github/devcavin/backend/security/SecurityConfig.kt b/backend/src/main/kotlin/io/github/devcavin/backend/security/SecurityConfig.kt
index 6286dc8..a2f79e3 100644
--- a/backend/src/main/kotlin/io/github/devcavin/backend/security/SecurityConfig.kt
+++ b/backend/src/main/kotlin/io/github/devcavin/backend/security/SecurityConfig.kt
@@ -50,7 +50,7 @@ class SecurityConfig(
     @Bean
     fun corsConfigurationSource(): CorsConfigurationSource {
         val config = CorsConfiguration()
-        config.allowedOrigins = corsProperties.allowedOrigins
+        config.allowedOrigins = listOf(corsProperties.allowedOrigins)
         config.allowedMethods = listOf("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS")
         config.allowedHeaders = listOf("*")
         config.allowCredentials = true
@@ -62,7 +62,8 @@ class SecurityConfig(
 
     @Configuration
     @ConfigurationProperties(prefix = "gatelog.cors")
+
     class CorsProperties {
-        var allowedOrigins: List<String>? = listOf("http://localhost:5173")
+        lateinit var allowedOrigins: String
     }
 }
\ No newline at end of file