Feature enable cors (#854)

* enabled cors in security configuration, added corresponding properties
* added test for cors validation
* formatting
* added mariadb test dependency and refactored test
* added database listeners to the test
* Remove dependency duplicate

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch-si.com>
Signed-off-by: Stefan Behl <stefan.behl@bosch-si.com>

hawkbit-security-core/src/main/java/org/eclipse/hawkbit/security/HawkbitSecurityProperties.java

@@ -8,6 +8,10 @@
  */
 package org.eclipse.hawkbit.security;
 
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.List;
+
 import org.springframework.boot.context.properties.ConfigurationProperties;
 
 /**
@@ -19,6 +23,7 @@ public class HawkbitSecurityProperties {
 
     private final Clients clients = new Clients();
     private final Dos dos = new Dos();
+    private final Cors cors = new Cors();
 
     /**
      * Content Security policy Header for Manager UI.
@@ -68,6 +73,69 @@ public class HawkbitSecurityProperties {
         return clients;
     }
 
+    public Cors getCors() {
+        return cors;
+    }
+
+    /**
+     * Security configuration related to CORS.
+     *
+     */
+    public static class Cors {
+
+        /**
+         * Flag to enable CORS.
+         */
+        private boolean enabled = false;
+
+        /**
+         * Allowed origins for CORS.
+         */
+        private List<String> allowedOrigins = Collections.singletonList("http://localhost");
+
+        /**
+         * Allowed headers for CORS.
+         */
+        private List<String> allowedHeaders = Collections.singletonList("*");
+
+        /**
+         * Allowed methods for CORS.
+         */
+        private List<String> allowedMethods = Arrays.asList("DELETE", "GET", "POST", "PATCH", "PUT");
+
+        public boolean isEnabled() {
+            return enabled;
+        }
+
+        public void setEnabled(final boolean enabled) {
+            this.enabled = enabled;
+        }
+
+        public List<String> getAllowedOrigins() {
+            return allowedOrigins;
+        }
+
+        public void setAllowedOrigins(final List<String> allowedOrigins) {
+            this.allowedOrigins = allowedOrigins;
+        }
+
+        public List<String> getAllowedHeaders() {
+            return allowedHeaders;
+        }
+
+        public void setAllowedHeaders(final List<String> allowedHeaders) {
+            this.allowedHeaders = allowedHeaders;
+        }
+
+        public List<String> getAllowedMethods() {
+            return allowedMethods;
+        }
+
+        public void setAllowedMethods(final List<String> allowedMethods) {
+            this.allowedMethods = allowedMethods;
+        }
+    }
+
     /**
      * Security configuration related to clients.
      *