ASP.NET核心CORS与GET一起工作，但与wit POST无关

Question

我使用Angular 4应用程序与Asp核心web api，我测试了不同的端口在locahost上。我的WebApi需要Windows身份验证（需要获得登录用户名）。所有的电话都使用GET工作，但不幸的是，我无法得到POST工作。我为CORS设置了WebApi：

        public void ConfigureServices(IServiceCollection services)
    {
        // Add framework services.
        services.AddApplicationInsightsTelemetry(Configuration);
        services.AddDbContext<CatalogContext>(options =>
            options.UseSqlServer(Configuration.GetConnectionString("DefaultConnection")));
        services.AddCors(options =>
        {
            options.AddPolicy("AllowAll", builder =>
            {
                builder.AllowAnyOrigin()
                    .AllowAnyHeader()
                    .AllowAnyMethod()
                    .AllowCredentials();
            });

        });
        services.AddMvc();
    }

angular 4客户端正试图发布文件

fileChange(event) {
let fileList: FileList = event.target.files;
if (fileList.length > 0) {
  let file: File = fileList[0];
  let formData: FormData = new FormData();
  formData.append('uploadFile', file, file.name);
  let headers = new Headers();
  /** No need to include Content-Type in Angular 4 */
  headers.append('Content-Type', 'multipart/form-data');
  headers.append('Accept', 'application/json');

  let options = new RequestOptions({ headers: headers, withCredentials: true });
  this.http.post("http://localhost:495/api//upload",formData, options)
    .map(res => res.json())
    .catch(error => Observable.throw(error))
    .subscribe(
    data => console.log('success'),
    error => console.log(error)
    )
}

Answer 1

飞行前请求(OPTIONS)不向服务器发送auth信息。因此，除了WinAuth之外，还需要启用匿名Auth。请参见:https://stackoverflow.com/a/50354772/946773