...
| Note |
|---|
This configuration is only valid for APIs created through the API manager Publisher application. All the other Oauth token related APIs (/authorize, /revoke, /token, /userinfo) are not effected affected from this. To enable CORS configuration to these APIs as well, see "Enabling CORS for Oauth Token related APIs". |
...