Re: [wildfly-dev] Push for CORS in WildFly 8

I dont understand your second point, but +1 for enabling cors. It would enable arbitrary use cases that rely on the http endpoint. But cors is onky one part if the story. The authentication mechanism would need to change as well, to allow for better integration. Has anyone evaluated keycloak as an alternative for securing the http management endpoint? At a first glance it seems to solve many of the problems we've outlined before.