<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style>body{font-family:Verdana,Arial;font-size:13px}</style>
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div id="bloop_customfont" style="font-family:Verdana,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
I see, so I’ll need to think of something else then - I know that this is a stupid use-case, but we have a requirement where the application has to request a token by credentials supplied from elsewhere. :-(</div>
<div id="bloop_customfont" style="font-family:Verdana,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
<br>
</div>
<div id="bloop_customfont" style="font-family:Verdana,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
Thanks again,</div>
<div id="bloop_customfont" style="font-family:Verdana,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
Gregor</div>
<div class="bloop_sign" id="bloop_sign_1436798018990576128"></div>
<br>
<p class="airmail_on" style="color:#000;">Am 13. Juli 2015 bei 16:22:34, Stian Thorgersen (<a href="mailto:stian@redhat.com">stian@redhat.com</a>) schrieb:</p>
<blockquote type="cite" class="clean_bq"><span>
<div>
<div></div>
<div>Ah, sorry missed that. We don't currently add CORS headers for the user credential grant flow as it shouldn't be used by a web application.
<br>
<br>
----- Original Message ----- <br>
> From: "Gregor Tudan" <Gregor.Tudan@cofinpro.de> <br>
> To: keycloak-user@lists.jboss.org <br>
> Sent: Monday, 13 July, 2015 4:07:12 PM <br>
> Subject: Re: [keycloak-user] CORS Header for direct grants <br>
> <br>
> Hi Stian, <br>
> <br>
> I’m aware that I’m comparing different request here (code vs. password - I <br>
> just had them at hands). But is that relevant relevant in terms of the <br>
> CORS-Headers returned? <br>
> <br>
> Thanks, <br>
> Gregor <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> <br>
> Am 13. Juli 2015 bei 15:14:42, Stian Thorgersen ( stian@redhat.com ) schrieb: <br>
> <br>
> <br>
> 20AEZy_EQY5Is.03b568e4-adcd-4c7d-bc81-44fded29be61&grant_type=authorization_code&client_id=vv-frontend&redirect_uri=<snip>
<br>
> > But when I request a token by direct grant, the CORS-Headers are missing: <br>
> > <br>
> > <br>
> > <br>
> > 1. POST /auth/realms/VV/protocol/openid-connect/token HTTP/1.1 Host: <br>
> > fs01e.tech.visualvest.de Connection: keep-alive Content-Length: 69 <br>
> > Accept: application/json Origin: http://localhost:8000 User-Agent: <br>
> > Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 <br>
> > (KHTML, like Gecko) Chrome/43.0.2357.132 Safari/537.36 Content-type: <br>
> > application/x-www-form-urlencoded DNT: 1 Referer: <br>
> > http://localhost:8000/app/depot/ Accept-Encoding: gzip, deflate <br>
> > Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 <br>
> > Content <br>
> > <br>
> > <br>
> > 1. username=dirk&password=dirk&client_id=vv-frontend&grant_type=password <br>
> > Am I missing something? <br>
> > <br>
> > Thanks, <br>
> > Gregor <br>
> > <br>
> > _______________________________________________ <br>
> > keycloak-user mailing list <br>
> > keycloak-user@lists.jboss.org <br>
> > https://lists.jboss.org/mailman/listinfo/keycloak-user <br>
> OCALE=de; <br>
> > KEYCLOAK_IDENTITY=eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiI1YTI4YTk1MS02ZDY2LTQ1YzEtOTM3Ny0zMjdjYzAwYzA3YjYiLCJleHAiOjE0MzY4MjgyNjIsIm5iZiI6MCwiaWF0IjoxNDM2NzkyMjYyLCJpc3MiOiJodHRwOi8vZnMwMWUudGVjaC52aXN1YWx2ZXN0LmRlL2F1dGgvcmVhbG1zL1ZWIiwic3ViIjoiOWZlNGM3ZWEtYmNjNS00NmY2LWEwMzMtZjllZGE4ZDlmYTVjIiwic2Vzc2lvbl9zdGF0ZSI6ImRkNmE2ZDVjLWRkYjMtNDc3Mi1hZDNkLTk2OGJiMzc1NzdjOSIsInJlc291cmNlX2FjY2VzcyI6e319.PabltPm2_dkWsZ4fwS8jrxTW0qv7nFY2ZkZAjjFozkxP7K8kZcg7We4gzshkqdRF1kfB57_zQFp8BKyRa08hG5zskZk_SmpbOwAoKL2lrME7Zm7ErBSMIF7KZ6ZUIznIu8LTnP0m0mgmReqxNEYtIdim-7sXdfEhws9q-cC4mAQ;
<br>
> > KEYCLOAK_SESSION=VV/9fe4c7ea-bcc5-46f6-a033-f9eda8d9fa5c/dd6a6d5c-ddb3-4772-ad3d-968bb37577c9
<br>
> > <br>
> > Content: <br>
> > <br>
> > <br>
> > 1. <br>
> > code=rDhHgSDNa9MgJl9RSqk7TLOByTto2A20AEZy_EQY5Is.03b568e4-adcd-4c7d-bc81-44fded29be61&grant_type=authorization_code&client_id=vv-frontend&redirect_uri=<snip>
<br>
> > But when I request a token by direct grant, the CORS-Headers are missing: <br>
> > <br>
> > <br>
> > <br>
> > 1. POST /auth/realms/VV/protocol/openid-connect/token HTTP/1.1 Host: <br>
> > fs01e.tech.visualvest.de Connection: keep-alive Content-Length: 69 <br>
> > Accept: application/json Origin: http://localhost:8000 User-Agent: <br>
> > Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 <br>
> > (KHTML, like Gecko) Chrome/43.0.2357.132 Safari/537.36 Content-type: <br>
> > application/x-www-form-urlencoded DNT: 1 Referer: <br>
> > http://localhost:8000/app/depot/ Accept-Encoding: gzip, deflate <br>
> > Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 <br>
> > Content <br>
> > <br>
> > <br>
> > 1. username=dirk&password=dirk&client_id=vv-frontend&grant_type=password <br>
> > Am I missing something? <br>
> > <br>
> > Thanks, <br>
> > Gregor <br>
> > <br>
> > _______________________________________________ <br>
> > keycloak-user mailing list <br>
> > keycloak-user@lists.jboss.org <br>
> > https://lists.jboss.org/mailman/listinfo/keycloak-user <br>
> <br>
> _______________________________________________ <br>
> keycloak-user mailing list <br>
> keycloak-user@lists.jboss.org <br>
> https://lists.jboss.org/mailman/listinfo/keycloak-user <br>
</div>
</div>
</span></blockquote>
</body>
</html>