did you configure CORS correctly?

[celevra]

Hi,

i get an alert windows with the Question "Did you configure CORS correctrly" but if i take a look into the console i can't find cors errors, only one 401 error against the keycloak:

keycloak.mjs:776     POST https://login.xxx.xxx/realms/xxx/protocol/openid-connect/token 401 (Unauthorized)

any ideas?

[d3473r]

Hmm, maybe you have a typo in your realm or client-id. Can you attach a screenshot of the client settings in keycloak?

[celevra]

[d3473r]

Thanks :) You configured the client as a confidential client. But it should be configured as a public one, as this is a browser app which cannot hold secrets:

• https://www.oauth.com/oauth2-servers/definitions/
• https://oauth.net/2/client-types/

For comparison, my keycloak config looks like this:

{
  "realm": "realm",
  "auth-server-url": "https://iam.example.com/auth",
  "ssl-required": "external",
  "resource": "client",
  "public-client": true,
  "confidential-port": 0
}

[celevra]

thank you, from there i came a step further but had curs issues that where strange to me (we have a dozen of clients in our keycloak that are not having cors issues). To keep it short: you showed me the simple idea: an app that authenticates via keycloak and then signs a jwt and redirects back. We had everything we needed in node so that we hacked a little script. thanks for you help and time