asp.net mvc“所需的防偽表單字段”__ RequestVerificationToken“不存在。”

Question

在我的部分視圖中，我使用了一些jquery代碼來提交我的表單。但是我收到了這個錯誤The required anti-forgery form field"__RequestVerificationToken" is not present. 如你所見，我在部分視圖中添加了@Html.AntiForgeryToken() ，並且我在控制器上添加了[ValidateAntiForgeryToken] 。 但我又得到了錯誤。我已經閱讀了StackOverflow中的所有問題，但他們無法幫助我。

@model Dentistry.Areas.ViewModels.UserViewModel

    <div class="modal-header">
        <button type="button" class="close" data-dismiss="modal" aria-hidden="true">
            <span class="glyphicon glyphicon-remove" aria-hidden="true"></span>
        </button>
        <h4 class="modal-title custom_align" id="Heading">ویرایش کاربران</h4>

    </div>

    @if (Model != null && Model.UserId != string.Empty)
    {
        <div class="modal-body" id="editModal">
            <form id="#myForm">
              @Html.AntiForgeryToken()
                <div class="form-group">
                    @Html.HiddenFor(a => a.UserId)
                </div>
                <div class="form-group">
                    <label>نام کاربری</label>
                    @Html.TextBoxFor(a => a.UserName, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.UserName)
                </div>
                <div class="form-group">
                    <label>نام</label>
                    @Html.TextBoxFor(a => a.FirstName, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.FirstName)
                </div>

                <div class="form-group">
                    <label>نام خانوادگی</label>
                    @Html.TextBoxFor(a => a.LastName, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.LastName)
                </div>
                <div class="form-group">
                    <label>جنسیت</label>
                    @Html.TextBoxFor(a => a.Gender, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.Gender)
                </div>
                <div class="form-group">
                    <label>وضعیت</label>
                    @Html.TextBoxFor(a => a.IsActive, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.IsActive)
                </div>

                <div class="form-group">
                    <label>ایمیل</label>
                    @Html.TextBoxFor(a => a.Email, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.Email)
                </div>
                <div class="form-group">
                    <label>آدرس</label>
                    @Html.TextBoxFor(a => a.Address, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.Address)
                </div>
                <div class="form-group">
                    <label>شماره تماس</label>
                    @Html.TextBoxFor(a => a.PhoneNumber, new { @class = "form-control" })
                    @Html.ValidationMessageFor(a => a.PhoneNumber)
                </div>

                <a href="#" id="btnSubmit" class="btn btn-success btn-block">ویرایش</a>

            </form>


        </div>
    }
    <script>
        $(document).ready(function () {



            $("#btnSubmit").click(function () {
                var token = $('input[name="__RequestVerificationToken"]').val();
                var headers = {};
                // other headers omitted
                headers['__RequestVerificationToken'] = token;
                //  $('#loaderDiv').show();
                var myFormData = $("#myForm").serialize();
                console.log(myFormData);
                $.ajax({
                    cache:false,
                    type: "POST",
                    headers: headers,
                    url: "/Users/Edit",
                    dataType:"json",
                    data: myFormData,
                    success: function () {
                        //  $('#loaderDiv').hide();
                        $('#edit').modal('hide');
                        window.location.href = "/Users/Index";
                    }

                });

            });

        });
    </script>

===============================================

    [HttpPost]
    [ValidateAntiForgeryToken]
    // [Bind(Include = "UserID,UserName,PasswordHash,FirstName,LastName,Gender,Email,CreateDate,IsActive,Address,PhoneNumber")]
    public ActionResult Edit(UserViewModel user)
    {
        //
        //bool status=false;
        if (ModelState.IsValid)
        {
            var userQuery=db.User.SingleOrDefault(u => u.Id  == user.UserId);
            if (user.UserId != string.Empty)
            {
                userQuery.FirstName = user.FirstName;
                userQuery.LastName = user.LastName;
                userQuery.PhoneNumber = user.PhoneNumber;
                userQuery.UserName = user.UserName;
                userQuery.Email = user.Email;
                userQuery.Address = user.Address;
                userQuery.Gender = Convert.ToBoolean(user.Gender);
                userQuery.IsActive = Convert.ToBoolean(user.IsActive);
            }
            else
            {
                User userDB=new User();
                userDB = userQuery;
                db.User.Add(userDB);
            }
            //  db.Entry(user).State = EntityState.Modified;
            db.SaveChanges();
            //status = true;

        }
        return RedirectToAction("Index");
        // return View(user);
        // return new JsonResult { Data = new { status = status } };
    }

Answer 1

而不是使用客戶端標簽使用razor表單標簽

 @using (Html.BeginForm("Action", "Controller", FormMethod.Post, new { id = "formID", @class = "form-horizontal" }))
       {

//formCode
} 

它會看起來像

在客戶端

$(function(){
     $('#formID').on('submit',function(e){
e.preventDefault();
     SubmitForm();
    })
})
  function SubmitForm() {
            var data = $("#RequestForm").serialize();
            var url = "/RequestManagement/ProcessRequest"
            var form = $('#RequestForm')[0]
            var formdata = false;
            if (window.FormData) {
                formdata = new FormData(form);
            }
            $.ajax({
                url: url,
                type: 'POST',
                dataType: 'json',
                data: formdata ? formdata : data,
                cache: false,
                contentType: false,
                //  enctype: 'multipart/form-data',
                processData: false,
                success: function (data) {
                    if (data == "SessionTimeout") {
                        window.location.href = "/Account/Relogin";
                    }

我的形式是這樣的

    @using (Html.BeginForm("ProcessRequest", "RequestManagement", FormMethod.Post, new { id = "RequestForm", @class = "form-horizontal" }))
    {
        @Html.AntiForgeryToken();
        <div class="box-body">
            <div class="form-group">
                <label for="selectStatus" class="col-sm-2 control-label">Status :</label>
                <div class="col-sm-10">
                    <select class="form-control" name="StatusID" id="selectStatus" data-val="true" data-val-required="Please select a Status.">
                        <option value="" selected="selected">--Select Status--</option>
                    </select>
                    <span data-valmsg-for="StatusID" data-valmsg-replace="true"></span>
                    <input type="hidden" name="StatusName" id="statusName" />
                </div>
            </div>
            <div class="form-group">
                <label for="textComment" class="col-sm-2 control-label">Comment :</label>

                <div class="col-sm-10">
                    <textarea class="form-control" name="Comment" id="textComment" style="resize:none;" placeholder="Comment" rows="3" data-val="true" data-val-required="Please enter a Comment."></textarea>
                    <span data-valmsg-for="Comment" data-valmsg-replace="true"></span>
                </div>
            </div>
            <input type="hidden" name="RequestID" id="requestIDHolder" required />
        </div>
        <div class="box-footer"></div>
        <!-- /.box-body -->
        <div class="modal-footer">
            <button type="submit" class="btn btn-info">Save</button>
            <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
        </div>

    }

Answer 2

您將防偽標記放在請求標頭中。 只需將其添加到您發布的表單數據對象中：

myFormDatadata.__RequestVerificationToken = token;