Merge pull request #261 from micromata/Release-8.1-SNAPSHOT

Release 8.1 snapshot
Flyway stuff (old table removed, missed migrations int -> bigint added).
CORS simplified.
Employee: weeklyWorkingHours are now time-dependent.

ToDo.adoc

@@ -1,5 +1,6 @@
 ==== Aktuell:
-
+- History-Entries für EmployeeValidityAttrDO werden nicht ordentlich geschrieben.
+- JCR: Tool for removing or recovering orphaned nodes.
 - Favoriten bei Scriptausführung für Parameter.
 - KI-Anteil in Zeitberichten
 - Viewpage für user für non-admins.

projectforge-application/src/main/java/org/projectforge/config/WebApplicationConfig.java

@@ -49,7 +49,8 @@ public void addCorsMappings(CorsRegistry registry) {
            PFSpringConfiguration.logCorsFilterWarning(log);
             // Allow maximum access for development on localhost
             registry.addMapping("/**")
-                    .allowedOriginPatterns("*")  // Allow all origins (this is the most permissive)
+                    // '*' doesn't work for modern browsers, use 'http://localhost:3000' instead:
+                    .allowedOrigins(pfSpringConfiguration.getCorsAllowedOrigins())
                     .allowedMethods("*")  // Allow all HTTP methods (GET, POST, PUT, DELETE, OPTIONS, etc.)
                     .allowedHeaders("*")  // Allow all headers
                     .allowCredentials(true)  // Allow credentials (cookies, authorization headers)

projectforge-application/src/main/java/org/projectforge/config/WebXMLInitializer.java

@@ -73,12 +73,6 @@ public void onStartup(ServletContext sc) throws ServletException {
         securityHeaderFilter.addMappingForUrlPatterns(null, false, "/*");
         securityHeaderFilter.setInitParameter(SecurityHeaderFilter.PARAM_CSP_HEADER_VALUE, cspHeaderValue);
 
-        if (pfSpringConfiguration.getCorsFilterEnabled()) {
-            log.warn("************* Enabling CorsPreflightFilter for development. *************");
-            FilterRegistration.Dynamic corsPreflightFilter = sc.addFilter("CorsPreflightFilter", CorsPreflightFilter.class);
-            corsPreflightFilter.addMappingForUrlPatterns(null, false, "/*");
-        }
-
         /*
          * Redirect orphaned links from former versions of ProjectForge (e. g. if link in e-mails were changed due to migrations or refactoring.
          */