Default CORS support in web.xml

[nynymike]

We should update the filter element in oxauth's web.xml to support CORS by default.

[qbert2k]

CORS must be configured in oxAuth Configuration (LDAP)

    "corsConfigurationFilters": [
        {
            "filterName": "CorsFilter",
            "corsAllowedOrigins": "*",
            "corsAllowedMethods": "GET,POST,HEAD,OPTIONS",
            "corsAllowedHeaders": "Origin,Authorization,Accept,X-Requested-With,Content-Type,Access-Control-Request-Method,Access-Control-Request-Headers",
            "corsExposedHeaders": "",
            "corsSupportCredentials": true,
            "corsLoggingEnabled": false,
            "corsPreflightMaxAge": 1800,
            "corsRequestDecorate": true
        }
    ]

[willow9886]

@qbert2k @aliaksander-samuseu is this issue resolved?

[aliaksander-samuseu]

@nynymike @qbert2k @willow9886

CORS configuration is moved to LDAP in 3.0.2 and correct configuration is loaded by filter successfully now. Javier also updated default filter settings to include "Authorization" header (commit). Default configuration is enough to support implicit flow out-of-the-box now, closing the issue.