如何在ASP.NET内核中启用CORS

Question

// Summary:
//     Creates a new instance of the Microsoft.AspNetCore.Cors.Core.EnableCorsAttribute.
//
// Parameters:
//   policyName:
//     The name of the policy to be applied.
public EnableCorsAttribute(string policyName);

Answer 1

您必须在应用程序启动时在ConfiguReservices方法中配置CORS策略：

public void ConfigureServices(IServiceCollection services)
{
    services.AddCors(o => o.AddPolicy("MyPolicy", builder =>
    {
        builder.AllowAnyOrigin()
               .AllowAnyMethod()
               .AllowAnyHeader();
    }));

    // ...
}

builder中的Corspolicybuilder允许您根据需要配置策略。现在可以使用此名称将策略应用于控制器和操作：

[EnableCors("MyPolicy")]

或将其应用于每一个请求：

public void Configure(IApplicationBuilder app)
{
    app.UseCors("MyPolicy");

    // ...

    // This should always be called last to ensure that
    // middleware is registered in the correct order.
    app.UseMvc();
}