Feature request · API & developer experience · Blocks work
Allow customizing CORS Access-Control-Allow-Headers
1 source thread · first seen 2022-06
Summary
Allowed headers are hard-coded, so Keycloak is incompatible with distributed tracing headers such as traceparent from OpenTelemetry and Elastic APM.
- Affects
- Teams using distributed tracing
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“makes keycloak incompatible, for example, with distributed tracing systems (opentelemetry, elastic-agent)”