Keycloak has two types of CORS features:
* CORS support for Keycloak endpoints
* CORS support in adapters to implement CORS support for application
Which one are you trying to test?
In either case openid-connect/auth does not support CORS, while openid-connect/token
does.
----- Original Message -----
From: "Henk Laracker"
<Henk.Laracker(a)planonsoftware.com>
To: keycloak-user(a)lists.jboss.org
Sent: Tuesday, April 14, 2015 4:38:23 PM
Subject: [keycloak-user] How to test CORS functionality
Hi,
I like to be sure if CORS works as expected, I switch back to version 1.1 of
keycloak configured a realm (planon) and a application (ROOT). With a web
origin “www.example.com”
The keycloak application runs on the open shift cloud :
https://keycloakmaster-ciwwa.rhcloud.com/auth /
What is the best way to test if CORS is working? If found the web site
http://test-cors.org filled in the follwong url
https://keycloakmaster-ciwwa.rhcloud.com/auth/realms/planon/protocol/open...
But this does not give me the expected result, does this mean that I found a
bug? I expected to see
CORS Response
Set-Cookie: cookie-from-server=noop
Content-Length: 0
Content-Type: application/json
Access-Control-Allow-Origin:
www.example.com
Cache-Control: no-cache
Please Help,
Henk
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user