<div dir="ltr">Not really. It needs CORS for every URI it hits. Refresh is a different URI from the code->token exchange one it uses initially.<div><br></div><div>When Keycloak redirects back to the GWT app and the code is exchanged for the tokens, I see this in the Network trace:<div><br></div><div>First an OPTIONS request:</div><div><br></div><div><ol class="" tabindex="0" style="list-style-type:none;margin:0px;outline:none;font-size:12px"><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Remote Address:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8080">127.0.0.1:8080</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request URL:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://localhost:8080/auth/realms/GameSeeder/tokens/access/codes">http://localhost:8080/auth/realms/GameSeeder/tokens/access/codes</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">OPTIONS</div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Status Code:</div><div class="" title="200 OK" style="margin-right:3px;vertical-align:middle;width:10px;height:10px;display:inline-block;background-image:url(chrome-devtools://devtools/bundled/Images/statusbarButtonGlyphs.png)"></div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">200 OK</div></li><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Request Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">*/*</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">gzip, deflate, sdch</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Language:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">en-US,en;q=0.8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Request-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">authorization, content-type</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Request-Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Host:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">localhost:8080</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Referer:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888/Main.html">http://127.0.0.1:8888/Main.html</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">User-Agent:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Response Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Credentials:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">true</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Methods:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">GET, HEAD, OPTIONS</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Max-Age:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">3600</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Length:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">0</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Date:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Tue, 02 Dec 2014 14:51:47 GMT</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Server:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">WildFly/8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">X-Powered-By:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Undertow/1</div></li></ol></ol><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap">Then the actual code exchange request:</span></font></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div><div><ol class="" tabindex="0" style="list-style-type:none;margin:0px;outline:none;font-size:12px"><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Remote Address:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8080">127.0.0.1:8080</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request URL:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://localhost:8080/auth/realms/GameSeeder/tokens/access/codes">http://localhost:8080/auth/realms/GameSeeder/tokens/access/codes</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Status Code:</div><div class="" title="200 OK" style="margin-right:3px;vertical-align:middle;width:10px;height:10px;display:inline-block;background-image:url(chrome-devtools://devtools/bundled/Images/statusbarButtonGlyphs.png)"></div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">200 OK</div></li><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Request Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">*/*</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">gzip, deflate</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Language:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">en-US,en;q=0.8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Authorization:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Basic R2FtZVNlZWRlcjoyYTczYTQ0Yi1lMGFhLTRiMTYtODk2OC1hY2YwZTVlMGVlNTk=</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Length:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">85</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-type:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">application/x-www-form-urlencoded</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Cookie:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">KEYCLOAK_IDENTITY=eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiI5NTA4ZTg2Yi04ZjdhLTRmN2UtOWYzOC1jMTFhMDdkNjUyOWMiLCJleHAiOjE0MjAxMjM5MDYsIm5iZiI6MCwiaWF0IjoxNDE3NTMxOTA2LCJpc3MiOiJHYW1lU2VlZGVyIiwic3ViIjoiOTY0ZjkwNWMtZTg2ZC00NDUzLWE3MzItYWVlMDE5NGY5YTIwIiwic2Vzc2lvbl9zdGF0ZSI6ImVjODE0NjcyLTFhOWYtNDM1ZS04YjU4LTU4ZmI4MDNiMDZkYSIsInJlc291cmNlX2FjY2VzcyI6e319.LiS51MggFZVPJ-TUlcYejPD7x6pJvgdOYCLrHV8LKiIP6BGZzS7D4W0t3xsXeKxqBr-h3cSaY_BqWKRl4RGn67SHuWvoDRrS6xKPZuWPQ08NS_iQVrIKGOATtGF2VFMutnroa4Y_UNmi5T2gZFc-wphRWRV5YG-x-DGAqd4h42U; KEYCLOAK_SESSION=GameSeeder/964f905c-e86d-4453-a732-aee0194f9a20/ec814672-1a9f-435e-8b58-58fb803b06da; KEYCLOAK_REMEMBER_ME=username:alain</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Host:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">localhost:8080</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Referer:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888/Main.html">http://127.0.0.1:8888/Main.html</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">User-Agent:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Form Data<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span><span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view URL encoded</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">code:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">sCnqEAuF8YuobscjJnCKdGu6xqnZ-CsqT5prXc5i7os.b9cda44e-50d6-49dd-b30a-dee68b530662</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Response Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Credentials:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">true</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Methods:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Expose-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Access-Control-Allow-Methods</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Max-Age:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">3600</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Type:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">application/json</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Date:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Tue, 02 Dec 2014 14:51:47 GMT</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Server:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">WildFly/8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Transfer-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">chunked</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">X-Powered-By:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Undertow/1</div></li></ol></ol><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap">Now I wait 5+ minutes, forcing keycloak to use the refresh token. Since this uses the refresh URI for the first time, Chrome performs a preflight check:</span></font></div></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div><div><ol class="" tabindex="0" style="list-style-type:none;margin:0px;outline:none;font-size:12px"><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Remote Address:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8080">127.0.0.1:8080</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request URL:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://localhost:8080/auth/realms/GameSeeder/tokens/refresh">http://localhost:8080/auth/realms/GameSeeder/tokens/refresh</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">OPTIONS</div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Status Code:</div><div class="" title="200 OK" style="margin-right:3px;vertical-align:middle;width:10px;height:10px;display:inline-block;background-image:url(chrome-devtools://devtools/bundled/Images/statusbarButtonGlyphs.png)"></div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">200 OK</div></li><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Request Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">*/*</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">gzip, deflate, sdch</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Language:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">en-US,en;q=0.8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Request-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">authorization, content-type</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Request-Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Host:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">localhost:8080</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Referer:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888/Main.html">http://127.0.0.1:8888/Main.html</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">User-Agent:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Response Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Credentials:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">true</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Methods:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">GET, HEAD, OPTIONS</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Max-Age:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">3600</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Length:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">0</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Date:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Tue, 02 Dec 2014 15:00:32 GMT</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Server:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">WildFly/8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">X-Powered-By:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Undertow/1</div></li></ol></ol><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap">Followed by the actual refresh:</span></font></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div><div><ol class="" tabindex="0" style="list-style-type:none;margin:0px;outline:none;font-size:12px"><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Remote Address:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8080">127.0.0.1:8080</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request URL:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://localhost:8080/auth/realms/GameSeeder/tokens/refresh">http://localhost:8080/auth/realms/GameSeeder/tokens/refresh</a></div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Request Method:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Status Code:</div><div class="" title="200 OK" style="margin-right:3px;vertical-align:middle;width:10px;height:10px;display:inline-block;background-image:url(chrome-devtools://devtools/bundled/Images/statusbarButtonGlyphs.png)"></div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">200 OK</div></li><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Request Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">*/*</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">gzip, deflate</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Accept-Language:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">en-US,en;q=0.8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Authorization:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Basic R2FtZVNlZWRlcjoyYTczYTQ0Yi1lMGFhLTRiMTYtODk2OC1hY2YwZTVlMGVlNTk=</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Length:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">699</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-type:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">application/x-www-form-urlencoded</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Host:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">localhost:8080</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Referer:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888/Main.html">http://127.0.0.1:8888/Main.html</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">User-Agent:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Form Data<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span><span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view URL encoded</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">grant_type:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">refresh_token</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">refresh_token:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiJjMWZlOGUyNS0yNTlkLTQwYjYtOGFmMS0yMDU0Y2EwMTRkYWEiLCJleHAiOjE0MTc1MzkxMDcsIm5iZiI6MCwiaWF0IjoxNDE3NTMxOTA3LCJpc3MiOiJHYW1lU2VlZGVyIiwic3ViIjoiOTY0ZjkwNWMtZTg2ZC00NDUzLWE3MzItYWVlMDE5NGY5YTIwIiwidHlwIjoiUkVGUkVTSCIsImF6cCI6IkdhbWVTZWVkZXIiLCJzZXNzaW9uX3N0YXRlIjoiZWM4MTQ2NzItMWE5Zi00MzVlLThiNTgtNThmYjgwM2IwNmRhIiwicmVhbG1fYWNjZXNzIjp7InJvbGVzIjpbInVzZXIiXX0sInJlc291cmNlX2FjY2VzcyI6eyJhY2NvdW50Ijp7InJvbGVzIjpbInZpZXctcHJvZmlsZSIsIm1hbmFnZS1hY2NvdW50Il19fX0.HlAXTyosQ4SHL2WyqRVMDEwN2TXNQyqTKE8PRkbhnbhjJPq4alDP2mCBH2RV3a5KPDCTj1-H-bnKpebrV8fOWNVrQCCL5NN6t7KEYLH1hA75ak_xWSUNzz7s_ZlW9AVucuMCFk1-bXnDaQOilU9JOS2yomQYa4PvexmrbzEJ5Bs</div></li></ol><li title="" class="" style="font-family:'Segoe UI',Tahoma,sans-serif;padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;font-weight:bold">Response Headers<span class="" style="display:inline;margin-left:30px;font-weight:normal;color:rgb(115,115,115)">view source</span></li><ol class="" style="font-family:'Segoe UI',Tahoma,sans-serif;margin:0px;min-width:100%;list-style-type:none;padding:2px 6px!important"><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Credentials:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">true</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Methods:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">POST</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Allow-Origin:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px"><a href="http://127.0.0.1:8888">http://127.0.0.1:8888</a></div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Expose-Headers:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Access-Control-Allow-Methods</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Access-Control-Max-Age:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">3600</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Connection:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">keep-alive</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Content-Type:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">application/json</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Date:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Tue, 02 Dec 2014 15:00:32 GMT</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Server:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">WildFly/8</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">Transfer-Encoding:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">chunked</div></li><li title="" style="padding:0px 0px 0px 14px;margin-top:1px;word-wrap:break-word;white-space:nowrap"><div class="" style="color:rgb(84,84,84);display:inline-block;margin-right:0.5em;font-weight:bold;vertical-align:top;white-space:pre-wrap">X-Powered-By:</div><div class="" style="font-family:Consolas,'Lucida Console',monospace;white-space:pre-wrap;display:inline;margin-right:1em;word-break:break-all;margin-top:1px">Undertow/1</div></li></ol></ol><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div></div><div><font face="Consolas, Lucida Console, monospace"><span style="font-size:12px;white-space:pre-wrap"><br></span></font></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Dec 2, 2014 at 7:49 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
----- Original Message -----<br>
> From: "Alain Penders" <<a href="mailto:alain@rexorient.com">alain@rexorient.com</a>><br>
</span><span class="">> To: "Stian Thorgersen" <<a href="mailto:stian@redhat.com">stian@redhat.com</a>><br>
> Cc: <a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
> Sent: Tuesday, 2 December, 2014 3:43:13 PM<br>
> Subject: Re: [keycloak-dev] Fwd: Preflight for token refresh<br>
><br>
> I'm testing my UI using GWTs Super Dev Mode, which means its origin is set<br>
> to <a href="http://127.0.0.1:8888" target="_blank">http://127.0.0.1:8888</a>. Keycloak runs on <a href="http://127.0.0.1:8080/auth" target="_blank">http://127.0.0.1:8080/auth</a>.<br>
<br>
</span>Yes, that requires CORS, but doesn't necessarily require a PREFLIGHT request. My guess is that "GWTs Super Dev Mode" sets some custom headers on all requests.<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
> On Tue, Dec 2, 2014 at 7:32 AM, Stian Thorgersen <<a href="mailto:stian@redhat.com">stian@redhat.com</a>> wrote:<br>
><br>
> > It's the correct approach to add the preflight. Please send a PR and we'll<br>
> > merge it.<br>
> ><br>
> > Out of curiosity do you know why it's sending a preflight in your app? It<br>
> > doesn't when I test it out here, which AFAIK is correct according to spec<br>
> > (content-type is application/x-www-form-urlencoded and there's no custom<br>
> > headers set).<br>
> ><br>
> > ----- Original Message -----<br>
> > > From: "Alain Penders" <<a href="mailto:alain@rexorient.com">alain@rexorient.com</a>><br>
> > > To: <a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
> > > Sent: Tuesday, 2 December, 2014 3:04:50 PM<br>
> > > Subject: [keycloak-dev] Fwd: Preflight for token refresh<br>
> > ><br>
> > > Hi all,<br>
> > ><br>
> > > I'm building a new app using GWT 2.7 using the Keycloak javascript<br>
> > adapter<br>
> > > and GWT jsInterop. This works extremely well.<br>
> > ><br>
> > > The problem I ran into is if I walk away for 5 minutes and then try to do<br>
> > > something, the token refresh fails on preflight. As shown in the<br>
> > > documentation, I call keycloak.updateToken(30) to refresh the base token<br>
> > in<br>
> > > case it has expired. Since in this case it has indeed expired, keycloak<br>
> > > makes a call to /auth/realms/<myrealm>/tokens/refresh. The OPTIONS call<br>
> > to<br>
> > > this location doesn't contain the Accept headers, and my app ends up<br>
> > dead in<br>
> > > the water.<br>
> > ><br>
> > > To fix this, I added the following code to OpenIDConnectService:<br>
> > ><br>
> > > /**<br>
> > > * CORS preflight path for refresh token requests<br>
> > > *<br>
> > > * @return<br>
> > > */<br>
> > > @Path("refresh")<br>
> > > @OPTIONS<br>
> > > @Produces(MediaType.APPLICATION_JSON)<br>
> > > public Response refreshAccessTokenPreflight() {<br>
> > > if (logger.isDebugEnabled()) {<br>
> > > logger.debugv("cors request from: {0}",<br>
> > > request.getHttpHeaders().getRequestHeaders().getFirst("Origin"));<br>
> > > }<br>
> > > return Cors.add(request, Response.ok()).auth().preflight().build();<br>
> > > }<br>
> > ><br>
> > > If this wasn't the correct solution for my problem, I'd enjoy hearing<br>
> > where I<br>
> > > went wrong.<br>
> > ><br>
> > > Thanks,<br>
> > > Alain<br>
> > ><br>
> > ><br>
> > > _______________________________________________<br>
> > > keycloak-dev mailing list<br>
> > > <a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
> > > <a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br>
> ><br>
><br>
</div></div></blockquote></div><br></div>