[keycloak-user] CORS for direct grant access

[Stian Thorgersen]

----- Original Message -----
> From: "Sadiq Khoja" <sadiqkhoja at gmail.com>
> To: "Marek Posolda" <mposolda at redhat.com>
> Cc: keycloak-user at lists.jboss.org
> Sent: Tuesday, 7 April, 2015 12:28:28 PM
> Subject: Re: [keycloak-user] CORS for direct grant access
> 
> Dear Marek,
> 
> Because I don't want to redirect user to Keycloak's login page.
> 
> BTW: I was getting CORS error for refresh url as well so I added my origin in
> security-admin-console application and its working now.

There's many many reasons why what you're doing isn't the greatest idea and you'd be much better with redirecting to the login page (which you can style to match your app).

In either case you shouldn't use the security-admin-console app for your application, that's for the KC admin console. Create your own app and set origin on that!

> 
> ​
> Regards,
> ​​
> Sadiq Khoja
> 
> 
> On Tue, Apr 7, 2015 at 3:12 PM, Marek Posolda < mposolda at redhat.com > wrote:
> 
> 
> 
> Hi,
> 
> the question is why you need Direct Grant Access in javascript application? I
> think it will be much better to use our javascript adapter and retrieve the
> access token with it:
> http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html/ch08.html#javascript-adapter
> 
> Marek
> 
> 
> On 7.4.2015 10:24, Sadiq Khoja wrote:
> 
> 
> 
> Guys,
> 
> I want to enable CORS for Direct Grant Access, how to do it? I am getting
> following error from my javascript application:
> 
> (index):1 XMLHttpRequest cannot load
> http://localhost:8080/auth/realms/master/tokens/grants/access . No
> 'Access-Control-Allow-Origin' header is present on the requested resource.
> Origin ' http://pn.localhost:81 ' is therefore not allowed access. The
> response had HTTP status code 400.
> 
> 
> ​
> Regards,
> ​​
> Sadiq Khoja
> 
> 
> 
> _______________________________________________
> keycloak-user mailing list keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user