title: Request header field x-xsrf-token is not allowed by Access-Control-Allow-Headers in preflight response
body: <p>SprinBoot keycloak auth swagger is blocked by the browser with message,</p>
  <p>Request header field x-xsrf-token is not allowed by Access-Control-Allow-Headers in preflight response</p>
  <p>Access to fetch at 'http://localhost:8080/auth/realms/test/protocol/openid-connect/token' from origin 'http://localhost:8081' has been blocked by CORS policy: Request header field x-xsrf-token is not allowed by Access-Control-Allow-Headers in preflight response.</p>
  <pre><code>This cors configs were added to spring boot app,
        cors: true
        cors-allowed-methods: GET,POST,HEAD,PUT,DELETE,OPTIONS
        cors-allowed-headers: x-xsrf-token
  </code></pre>
  <p>as well as, the client url http://localhost:8081 was added to Web Origins  in keeycloak.
  Not sure what is still missing to get it work.</p>