带有 [HTTPPost] 的 .Net Core 3.1 API Action 方法返回 405 并带有错误的响应头允许

Question

I searched around and couldn't find a way to fix my issue. I have actions method below:

PostAction method with [Route("api/Deployments")] Client Post Request

Why is the Response Header Allow does have POST?

Thank you so much!

Answer 1

You are running to a CORS issue. You need to allow AJAX requests from a different domain. For example:

public void ConfigureServices(IServiceCollection services)
{
  services.AddCors(o => o.AddPolicy("MyPolicy", builder =>
  {
    builder.AllowAnyOrigin()
           .AllowAnyMethod()
           .AllowAnyHeader();
  }));

  // ...
}

And then apply this policy to controllers or actions as needed:

[EnableCors("MyPolicy")]

See How to enable CORS in ASP.NET Core and https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-3.1 for more details and examples.

Generally, and as a security measure, it is not a good practice to allow requests from all domains (*).