5:44 a.m.
Hi, I'm having a problem when using the Javascript Adapter with an application
deployed on Tomcat 7 at localhost:8088 and using Keycloak 1.8.0.CR3 on localhost:8080.
I get the following error at the browser console when trying to call the
keycloak.loadUserProfile() method.
XMLHttpRequest cannot load http://localhost:8080/auth/realms/demo/account. No
'Access-Control-Allow-Origin' header is present on the requested resource. Origin
'http://localhost:8088' is therefore not allowed access. The response had HTTP
status code 403.
And this when I try to call keycloak.loadUserProfile() method.
XMLHttpRequest cannot load
http://localhost:8080/auth/realms/demo/protocol/openid-connect/userinfo. No
'Access-Control-Allow-Origin' header is present on the requested resource. Origin
'http://localhost:8088' is therefore not allowed access. The response had HTTP
status code 403.
Details:
- If I don't login using keycloak.login() and just navigate to a restricted page
configured at the web.xml and login, after i'm redirected to the restricted page if I
try to call keycloak.loadUserProfile() I get the same error.
- If I login using keycloak.login() and then call keycloak.loadUserProfile() or
keycloak.loadUserProfile() it works.
- If I navigate to another page and try to call keycloak.loadUserProfile() or
keycloak.loadUserProfile() I get the same error.
- It only works right after I login, if I navigate to another page it won't work
anymore.
This is my keycloak.json file
{
"realm": "demo",
"realm-public-key":
"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrVrCuTtArbgaZzL1hvh0xtL5mc7o0NqPVnYXkLvgcwiC3BjLGw1tGEGoJaXDuSaRllobm53JBhjx33UNv+5z/UMG4kytBWxheNVKnL6GgqlNabMaFfPLPCF8kAgKnsi79NMo+n6KnSY8YeUmec/p2vjO2NjsSAVcWEQMVhJ31LwIDAQAB",
"auth-server-url": "http://localhost:8080/auth",
"ssl-required": "external",
"resource": "accounts-teste",
"public-client": true,
"enable-cors": true
}
--
Leonardo Nunes
________________________________
Esta mensagem pode conter informa??o confidencial e/ou privilegiada. Se voc? n?o for o
destinat?rio ou a pessoa autorizada a receber esta mensagem, n?o poder? usar, copiar ou
divulgar as informa??es nela contidas ou tomar qualquer a??o baseada nessas informa??es.
Se voc? recebeu esta mensagem por engano, por favor avise imediatamente o remetente,
respondendo o e-mail e em seguida apague-o. Agradecemos sua coopera??o.
This message may contain confidential and/or privileged information. If you are not the
addressee or authorized to receive this for the addressee, you must not use, copy,
disclose or take any action based on this message or any information herein. If you have
received this message in error, please advise the sender immediately by reply e-mail and
delete this message. Thank you for your cooperation