What exactly does allowedUrls setting mean in the implementation of angular-oauth2-oidc?

Issue

So, if my Angular app is running on localhost:4200 & keycloak server running on localhost:8080/auth, which URL values should I add in allowedUrls array?

OAuthModule.forRoot({
    resourceServer: {
        allowedUrls: [...],
        sendAccessToken: true
    }
})

Solution

localhost:4200 should be what you add to "allowedUrls". This tells the auth server that requests from your angular app are "allowed".

Answered By - cklimowski