On 4 March 2016 at 18:18, Sebastien Blanc <sblanc@redhat.com> wrote:
No CORS stuff needed as the keycloak.json will always be on the same domain as the app, it happens here https://github.com/keycloak/keycloak-js-bower/blob/master/dist/keycloak.js#L523

keycloak.json can be loaded from anywhere (see http://keycloak.github.io/docs/userguide/keycloak-server/html/ch08.html#javascript-adapter), but it'd be up to whatever serves it to make sure CORS headers are added.
 


On Fri, Mar 4, 2016 at 6:12 PM, Charles Moulliard <cmoulliard@redhat.com> wrote:
Hi,

How is the keycloak.json file loaded by the keycloak.js script as I
don't see any value like this "cors-allowed-methods" within the
keycloak.js file ?

Regards,

Charles
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user


_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user