c# - 如何在 ASP.NET Core 6.0 Web API 项目中启用 cors？

Question

在我的 ASP.NET Core 6.0 Web API 项目中配置 CORS。但预检请求收到 http 405 错误。

换句话说，HTTP OPTION 是不允许的。好像没有启用cors。

我已经看过示例，config.EnableCors();但App_Start/WebApiConfig.cs此项目模板中没有。

我在这里想念什么？

程序.cs

var builder = WebApplication.CreateBuilder(args);

// Add services to the container.

builder.Services.AddControllers();

// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
builder.Services.AddEndpointsApiExplorer();
builder.Services.AddSwaggerGen();

var devCorsPolicy = "devCorsPolicy";
builder.Services.AddCors(options =>
{
    options.AddPolicy(devCorsPolicy, builder => {
        //builder.WithOrigins("http://localhost:800").AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader();
        builder.AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader();
        //builder.SetIsOriginAllowed(origin => new Uri(origin).Host == "localhost");
        //builder.SetIsOriginAllowed(origin => true);
    });
});


var app = builder.Build();

if (app.Environment.IsDevelopment())
{
    app.UseSwagger();
    app.UseSwaggerUI();
    app.UseCors(devCorsPolicy);
}
else 
{
    app.UseHttpsRedirection();
    app.UseAuthorization();
    //app.UseCors(prodCorsPolicy);
}

app.MapControllers();

app.Run();

Answer 1

添加服务builder.Services.AddCors和应用添加app.UseCors("corsapp");

替换 builder.WithOrigins("*")为builder.WithOrigins("http://localhost:800", "https://misite.com");

检查文件

     var builder = WebApplication.CreateBuilder(args);

    
    // Add services to the container.
    
    builder.Services.AddControllers();
    
    // Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
    builder.Services.AddEndpointsApiExplorer();
    builder.Services.AddSwaggerGen();
    //services cors
    builder.Services.AddCors(p => p.AddPolicy("corsapp", builder =>
    {
        builder.WithOrigins("*").AllowAnyMethod().AllowAnyHeader();
    }));
    
    var app = builder.Build();
    
    if (app.Environment.IsDevelopment())
    {
        app.UseSwagger();
        app.UseSwaggerUI();
        
    }
       //app cors
        app.UseCors("corsapp");
        app.UseHttpsRedirection();
        app.UseAuthorization();
        //app.UseCors(prodCorsPolicy);
    
    
    
    app.MapControllers();
    
    app.Run();

Answer 2

您发布的代码似乎工作正常。我将代码粘贴到一个新的 .NET 6 项目中，并且当从浏览器发送如下请求时，CORS 标头会添加到响应中。

fetch('http://localhost:7107/Weatherforecast').then(res => res.json()).then(e => console.log(e))

结果如下：