I could find a solution for my IE problem.
IE overwrites the Authorization header in the XMLHttpRequest (/protocol/openid-connect/token) with "Authorization: Negotiate".
To solve this problem, I added on the client the client_id and client_secret to the form and changed the authorizeClient method, so it checks first the form data instead of the authorization http header.
Have a look at my code:
Should I create a pull request for the changes or do you have a better solution?
No idea if there is other solution, I've never tried SPNEGO with Internet explorer TBH :(
Could you please create JIRA for this?
On 22.7.2015 10:07, Michael Gerber wrote:
My kerberos configuration works fine with FireFox and Chrome, but it does not work with IE.
It shows a prompt where the user has to enter a username and password.
I can fix this by adding
var req = new XMLHttpRequest();
approximately at the line 374 in the keycloack.js file.
Is there another solution for this problem?
keycloak-dev mailing list