将Asp.net核心控制器限制为特定域名

Question

I have a web API controller in asp.net core version 2.
this controller must receive requests from one domain for example test.com
test.com 's IP always change, therefor i can't limit this controller to IP.
what method can i use ?
just one of the controllers and the other's allow's any origins.
the controller is like this :

    [HttpPost]
    public IActionResult CBack([RequiredFromQuery]string id,
                               [FromBody] Newtonsoft.Json.Linq.JObject Cypher)

Answer 1

You can use scoped Cross-Origin Requests (CORS) :

[EnableCors("YourPolicy")]
[HttpPost]
public IActionResult CBack([RequiredFromQuery]string id,
                           [FromBody] Newtonsoft.Json.Linq.JObject Cypher)

This allows you to enable Cross-Origin Requests per controller or action.

Don't forget to add the CORS service in your Startup.cs file. You must also register a custom policy first.

// ConfigureServices
services.AddCors(options =>
{
    options.AddPolicy("YourPolicy",
        builder => builder.WithOrigins("http://example.com"));
});