[keycloak-dev] Location Response Header

Stian Thorgersen sthorger at redhat.com
Wed May 18 08:06:00 EDT 2016


Maybe, not 100% sure though

On 18 May 2016 at 11:21, Thomas Darimont <thomas.darimont at googlemail.com>
wrote:

> Hello,
>
> Would it be enough to add .exposedHeaders("Location") where the CORS
> headers are configured like:
> org.keycloak.services.resources.admin.AdminRoot#getRealmsAdmin?
>
> https://github.com/keycloak/keycloak/blob/92db7b3618852d953e5b53482668c3ff2a0bb057/services/src/main/java/org/keycloak/services/resources/admin/AdminRoot.java#L212
>
> Cheers,
> Thomas
>
> 2016-05-18 8:45 GMT+02:00 Stian Thorgersen <sthorger at redhat.com>:
>
>> Permitting the Location header has to be changed in the admin endpoints
>> on the Keycloak server side. Adding those properties to keycloak.json only
>> control CORS headers for services in your own application.
>>
>> Please create a JIRA issue for this, you can mark it as a bug as the
>> admin endpoints should support CORS.
>>
>> On 16 May 2016 at 23:58, Alex Gouvêa Vasconcelos <alexgv99 at gmail.com>
>> wrote:
>>
>>> I'm trying to follow the link obtained in a 201 (user created) in the
>>> Keycloak API but I can't access the "location" header which should be
>>> returned in the response...
>>>
>>> $http.post(url, user)
>>> .then(
>>>      function(response) { console.log(response.headers()); },
>>>      function(error) {}
>>> )
>>>
>>> The whole response.header() collection is empty... yet, the chrome
>>> developer console shows the url to the new resource...
>>>
>>> I think, maybe this is related to the problem described here (
>>> http://www.aaron-powell.com/posts/2013-11-28-accessing-location-header-in-cors-response.html),
>>> but I have tryed to add the following lines to my keycloak.json and yet no
>>> success:
>>>   "enable-cors": true,
>>>   "cors-allowed-headers": "Location"
>>>
>>> Could anyone help me with that issue?
>>>
>>> ​Regards.
>>> Alex Gouvêa Vasconcelos​​
>>>
>>>
>>> _______________________________________________
>>> keycloak-dev mailing list
>>> keycloak-dev at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>>
>>
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20160518/a2ffddb5/attachment.html 


More information about the keycloak-dev mailing list