如何在ASP.NET Core MVC中启用跨源请求(CORS)

Question

我想在使用ASP.NET Core MVC构建的API上启用CORS,但所有当前文档都引用该框架的早期版本.

Answer 1

关于新Cors功能的注释非常简单,但通过查看新的类和方法,我能够在我的解决方案中使用它.我的Web API startup.cs看起来像这样.您可以通过使用新CorsPolicy类来了解如何构建自己的起源和策略.并使用AddCors和UseCors方法启用CORS .

 public void ConfigureServices(IServiceCollection services)
 {
     services.AddMvc();
     //Add Cors support to the service
     services.AddCors();

     var policy = new Microsoft.AspNet.Cors.Core.CorsPolicy();

     policy.Headers.Add("*");    
     policy.Methods.Add("*");          
     policy.Origins.Add("*");
     policy.SupportsCredentials = true;

     services.ConfigureCors(x=>x.AddPolicy("mypolicy", policy));

 }


 public void Configure(IApplicationBuilder app, IHostingEnvironment  env)
 {
     // Configure the HTTP request pipeline.

     app.UseStaticFiles();
     //Use the new policy globally
     app.UseCors("mypolicy");
     // Add MVC to the request pipeline.
     app.UseMvc();
 }

您还可以使用新属性来控制控制器中的策略

[EnableCors("mypolicy")]
[Route("api/[controller]")]  

Answer 2

我使用以下代码使用它:

public void ConfigureServices(IServiceCollection services)
{
    services.AddMvc();
    services.AddCors(options => options.AddPolicy("AllowAll", p => p.AllowAnyOrigin()));
}

如果需要,您可以链接AllowAnyHeader()和/或AllowAnyMethod()配置操作.

要为完整的应用配置它:

public void Configure(IApplicationBuilder app)
{
    app.UseCors("AllowAll");
}

或者只是为了一个控制器:

[EnableCors("AllowAll")]
public class HomeController : Controller
{
   // ...
}

-

更新:为所有请求配置CORS 可以更容易一些:

public void ConfigureServices(IServiceCollection services)
{
    services.AddMvc();
    services.AddCors();
}

public void Configure(IApplicationBuilder app)
{
    app.UseCors(builder =>
    {
        builder.WithOrigins("http://some.origin.com")
               .WithMethods("GET", "POST")
               .AllowAnyHeader();
    });
}

有关更多信息,请参阅文档.

Answer 3

在最近RC2的ASP.NET Core中.

NuGet包是

"Microsoft.AspNetCore.Owin": "1.0.0-rc2-final",
"Microsoft.AspNetCore.Cors": "1.0.0-rc2-final",

在Startup.cs中

public void ConfigureServices(IServiceCollection services)
{
    // Add framework services.
    services.AddCors();
    services.AddMvc();
}

public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
{
    loggerFactory.AddConsole(Configuration.GetSection("Logging"));
    loggerFactory.AddDebug();

    app.UseCors(builder =>  builder
    .AllowAnyOrigin());
    app.UseMvc();
}