refactor: prod

Author: joaov1ct0r

src/main/java/com/joaov1ct0r/restful_api_users_java/modules/auth/controllers/SignInController.java

@@ -69,14 +69,12 @@ public ResponseEntity<Object> handle(
         var userCookie = this.createCookieService.execute(
                 "user",
                 payload.getUserId(),
-                "localhost"
-//                "crud.shop"
+                "crud.shop"
         );
         var authorizationCookie = this.createCookieService.execute(
                 "authorization",
                 token,
-                "localhost"
-//                "crud.shop"
+                "crud.shop"
         );
 
         response.addCookie(userCookie);

src/main/java/com/joaov1ct0r/restful_api_users_java/modules/auth/services/CreateCookieService.java

@@ -10,11 +10,9 @@ public Cookie execute(String cookieName, String cookieValue, String domain) {
         int twoDaysInSeconds = 2 * 24 * 60 * 60; // 2 dias em segundos
         var cookie = new Cookie(cookieName, cookieValue);
         cookie.setDomain(domain);
-        cookie.setHttpOnly(false);
-//        cookie.setHttpOnly(true);
+        cookie.setHttpOnly(true);
         cookie.setPath("/");
-        cookie.setSecure(false);
-//        cookie.setSecure(true);
+        cookie.setSecure(true);
         cookie.setMaxAge(twoDaysInSeconds);
 
         return cookie;

src/main/java/com/joaov1ct0r/restful_api_users_java/security/CorsConfig.java

@@ -15,7 +15,6 @@ public CorsFilter corsFilter() {
         CorsConfiguration config = new CorsConfiguration();
         config.setAllowCredentials(true);
         config.addAllowedOrigin("https://crud.shop");
-        config.addAllowedOrigin("http://localhost:3000");
         config.addAllowedHeader("*");
         config.addAllowedMethod("*");
         source.registerCorsConfiguration("/**", config);

src/main/java/com/joaov1ct0r/restful_api_users_java/security/WebConfig.java

@@ -14,7 +14,7 @@ public WebMvcConfigurer corsConfigurer() {
             @Override
             public void addCorsMappings(CorsRegistry registry) {
                 registry.addMapping("/**") // Aplica CORS a todos os endpoints
-                        .allowedOrigins("https://crud.shop", "http://localhost:3000") // Define a origem permitida
+                        .allowedOrigins("https://crud.shop") // Define a origem permitida
                         .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS") // Define os métodos HTTP permitidos
                         .allowCredentials(true); // Permite o envio de cookies
             }