[keycloak-user] How to test CORS functionality

[Stian Thorgersen]

Keycloak has two types of CORS features:

* CORS support for Keycloak endpoints
* CORS support in adapters to implement CORS support for application

Which one are you trying to test?

In either case openid-connect/auth does not support CORS, while openid-connect/token does.

----- Original Message -----
> From: "Henk Laracker" <Henk.Laracker at planonsoftware.com>
> To: keycloak-user at lists.jboss.org
> Sent: Tuesday, April 14, 2015 4:38:23 PM
> Subject: [keycloak-user] How to test CORS functionality
> 
> Hi,
> 
> I like to be sure if CORS works as expected, I switch back to version 1.1 of
> keycloak configured a realm (planon) and a application (ROOT). With a web
> origin “www.example.com”
> The keycloak application runs on the open shift cloud :
> https://keycloakmaster-ciwwa.rhcloud.com/auth /
> 
> What is the best way to test if CORS is working? If found the web site
> http://test-cors.org filled in the follwong url
> 
> https://keycloakmaster-ciwwa.rhcloud.com/auth/realms/planon/protocol/openid-connect/auth?response_type=code&client_id=ROOT
> 
> But this does not give me the expected result, does this mean that I found a
> bug? I expected to see
> 
> CORS Response
> Set-Cookie: cookie-from-server=noop
> Content-Length: 0
> Content-Type: application/json
> Access-Control-Allow-Origin: www.example.com
> Cache-Control: no-cache
> Please Help,
> 
> Henk
> 
> 
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user