[keycloak-user] CORS only for OPTIONS?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, I've noticed that KC sets the CORS headers only during pre-flight request, not on the regular requests. While this is in accordance with the documentation, I'm wondering if there's a reason for not sending the CORS headers for non-OPTIONS headers as well. As it currently is, I'd have to implement the CORS response filter in my application anyway, so, I'm wondering in which scenarios I'd delegate this to KC. By the way, it seems that setting "enable-cors" to false has no effect, as the headers are still being added by KC. Juca.