[keycloak-user] CORS headers not sent issue

Hello I have come across weird issue regarding CORS implementation in Keycloak (ver. 2.2.1 ) I have properly specified "Web Origins" settings in Admin Console for the OIDC client. The problem is that the CORS headers (Access-Control-Allow-Origin) are not sent for all the requests coming towards idp.example.com (Implicit Flow) https://idp.example.com/auth/realms/test/.well-known/openid-configuration (CORS headers are sent) https://idp.example.com/auth/realms/test/protocol/openid-connect/certs (CORS headers are not sent) Is there something more to be configured in order to make Keycloak send CORS headers with all the requests? Maybe a bug? Curently I have added CORS headers on NGINX reverse proxy for this endpoint. (certs) Any advice is appreciated :) Tomas Grman