keycloak-aplcache

Fixed allowed methods for retrieving token with cors

11/9/2013 11:11:30 AM

Stian Thorgersen

Commit: 5b19e34

Tree: 5c03fea

Parents: 715109a

Changes

services/src/main/java/org/keycloak/services/resources/TokenService.java 2(+1 -1)

Details

services/src/main/java/org/keycloak/services/resources/TokenService.java 2(+1 -1)

diff --git a/services/src/main/java/org/keycloak/services/resources/TokenService.java b/services/src/main/java/org/keycloak/services/resources/TokenService.java
index d3a262e..580473b 100755
--- a/services/src/main/java/org/keycloak/services/resources/TokenService.java
+++ b/services/src/main/java/org/keycloak/services/resources/TokenService.java
@@ -435,7 +435,7 @@ public class TokenService {
         logger.debug("accessRequest SUCCESS");
         AccessTokenResponse res = accessTokenResponse(realm.getPrivateKey(), accessCode.getToken());
 
-        return Cors.add(request, Response.ok(res)).allowedOrigins(client).build();
+        return Cors.add(request, Response.ok(res)).allowedOrigins(client).allowedMethods("POST").build();
     }
 
     protected AccessTokenResponse accessTokenResponse(PrivateKey privateKey, SkeletonKeyToken token) {