On 11/17/16 5:50 PM, James Falkner wrote:
Hey Grant - if it's a protected URL, and you've configured
web origins
correctly for the client, and the adapter, and the browser is sending the
right stuff - then Keycloak adapter *should* add the CORS headers. I have a
few demos I've created that work in this way, but they all use the official
Red Hat SSO product, based on Keycloak 1.9.4.
RHSSO is based on 1.9.8.
Bill