带web API的角[重复]

Question

当我试图调用任何api时，我面临400错误。`

checkLogin(userInput): Observable<any> {
 return this.http.get('https://***/testhandler').pipe(
    map(this.extractData),
    catchError((error: HttpErrorResponse) => {
        let errorMessage = '';
        if (error.error instanceof ErrorEvent) {
            // client-side error
            errorMessage = `Error: ${error.error.message}`;
        } else {
            // server-side error
            errorMessage = `Error Code: ${error.status}\nMessage: ${error.statusText}`;
        }
        // window.alert(errorMessage);
        return of("");
    })
    // catchError(this.handleError<any>('addProduct'))
);`

我添加了标题

request = request.clone({
    setHeaders: {
        //Authorization: `Bearer ${currentUser.token}`
       'app-auth-fetch-qualifier': localStorage.getItem("tokenId"),
    }
}); 

我得到了400个错误，我的服务器端配置

if (Request.HttpMethod == "OPTIONS")
{

    Response.AddHeader("Access-Control-Allow-Methods", "GET,HEAD,OPTIONS,POST,PUT");
    Response.AddHeader("Access-Control-Allow-Headers", "Content-Type, Accept");
    Response.AddHeader("Access-Control-Max-Age", "1728000");
    Response.AddHeader("Access-Control-Allow-Credentials", "true");
    Response.AddHeader("Access-Control-Allow-Headers",
        "Access-Control-Allow-Headers, Origin,Accept, X-Requested-With,
         Content-Type, Access-Control-Request-Method,
         Access-Control-Request-Headers,app-auth-fetch-qualifier");
    Response.End();
}
else
{
    Response.AddHeader("Access-Control-Allow-Credentials", "true");
}

 <customHeaders>
    <add name="Access-Control-Allow-Origin" value="*" />
    <add name="Access-Control-Allow-Headers" value="Content-Type, Accept" />
    <add name="Access-Control-Allow-Methods" value="POST,GET,OPTIONS" />
    <add name="Access-Control-Max-Age" value="1728000" />
 </customHeaders>

'app-auth-fetch-qualifier': localStorage.getItem("tokenId")

Answer 1

https://stackoverflow.com/a/19744754/11475011的可能副本

这是安全的一部分，你不能这么做。如果您希望允许凭据，那么您的access-control-allog-orgin不能使用*。您必须指定确切的协议+域+端口。请参阅以下问题以供参考：

Access-Control-Allow-Origin通配符子域、端口和协议使用凭据进行跨源资源共享。因此，将http://localhost:3000或http://localhost:8000设置为allow origin标头。