[keycloak-user] Disable CORS on realm endpoints?

Joe Rowe josepharowe at gmail.com
Thu Mar 30 03:18:05 EDT 2017


Hi all,

Is there a configuration setting which will disable CORS at the endpoint
url:
<server>/auth/realms/<valid realm>
?

CORS is on by default here, but is not needed for our application and
causes false positives in pen testing.

Any help would be gratefully received!

Thanks
Joe


More information about the keycloak-user mailing list