AngularJS $ http.POST方法405错误

Question

在$ http.post方法中,我遇到了405问题.我们正在为POST和GET方法使用单一服务(REST).

如果url有localhost它正在工作.urlAddScenario是localhost/Service.svc/api/scenarios/add.如果我使用机器名而不是locahost它不起作用.machinname/Service.svc/API /场景/加

我的JS代码是

 scenarioExecutionFactory.addScenario = function (scenarioId) {
        return $http.post(urlAddScenario, scenarioId)               
    };

anotherJS:

 var runScenarioId = { "ScenarioId": 10 }
                   scenarioExecutionFactory.addScenario(runScenarioId )
                         .success(function (data) {
                             $scope.getScenarioRecentRuns($scope.CurrentScenario);
                         });

WCF服务:

  [OperationContract]
        [WebInvoke(UriTemplate = "api/scenarios/add",
            RequestFormat = WebMessageFormat.Json,
            ResponseFormat = WebMessageFormat.Json,
            Method = "POST")]
        Request AddScenario(ScenarioRequestParams requestParams);

配置:

   <system.webServer>
<httpProtocol>
  <customHeaders>
    <add name="Access-Control-Allow-Origin" value="*" />
    <add name="Access-Control-Allow-Credentials" value="true" />
    <add name="Access-Control-Allow-Methods" value="GET,POST,PUT,OPTIONS" />
    <add name="Access-Control-Allow-Headers" value="Origin,Content-Type,Accept,Authorization,X-Ellucian-Media-Type" />
  </customHeaders>

</httpProtocol>

我在Headers中看到OPTIONS而不是POST.

头:

**OPTIONS** http://ddd/HelloService/HelloService.svc/PostData HTTP/1.1
Accept: */*
Origin: http://localhost:31284
Access-Control-Request-Method: POST
Access-Control-Request-Headers: accept, content-type
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; rv:11.0) like Gecko
Host: vijayakatta
Content-Length: 0
DNT: 1
Connection: Keep-Alive
Pragma: no-cache

错误:

IE:SCRIPT7002:XMLHttpRequest:网络错误0x80070005,访问被拒绝.

Chrome:XMLHttpRequest无法加载htp // machinename/services.svc/api/scenarios/add.无效的HTTP状态代码405

响应标头:HTTP/1.1 405方法不允许

Answer 1

为了正确启用CORS,web.config您需要指定这3个自定义标头

<httpProtocol>
  <customHeaders>
    <add name="Access-Control-Allow-Origin" value="*" />
    <add name="Access-Control-Allow-Headers" value="Content-Type" />
    <add name="Access-Control-Allow-Methods" value="GET, POST, PUT, DELETE, OPTIONS" />
  </customHeaders>
</httpProtocol>

如果您计划支持PUT和DELETE动词,您还需要处理预检检查.您可以在这个答案中阅读更多关于CORS和预检的信息:https://stackoverflow.com/a/27374066/4304188