Merge pull request #1449 from gtudan/KEYCLOAK-1564

KEYCLOAK-1564: Add CORS-Headers to token requests by password credentials

services/src/main/java/org/keycloak/protocol/oidc/endpoints/TokenEndpoint.java

@@ -356,7 +356,7 @@ public class TokenEndpoint {
 
         event.success();
 
-        return Response.ok(res, MediaType.APPLICATION_JSON_TYPE).build();
+        return Cors.add(request, Response.ok(res, MediaType.APPLICATION_JSON_TYPE)).auth().allowedOrigins(client).allowedMethods("POST").exposedHeaders(Cors.ACCESS_CONTROL_ALLOW_METHODS).build();
     }
 
 }