在Asp.net Core 2.1的Angular 6中不存在“ Access-Control-Allow-Origin”標頭

Question

不斷獲取沒有 asp.net core 2.1在angular 6中出現“ Access-Control-Allow-Origin”標頭錯誤。

我知道這是cors錯誤。 我在服務器端添加了策略，但仍然存在相同的問題。

startup.cs

services.AddCors(o => o.AddPolicy("CorsPolicy", builder =>
            {
                builder.AllowAnyOrigin()
                       .AllowAnyMethod()
                       .AllowAnyHeader()
                       .AllowCredentials().WithOrigins("http://localhost:4200");
            }));



app.UseCors("CorsPolicy");

app.UseMvc();

控制器代碼

[HttpPost, AllowAnonymous]
        public GenericResponseObject<JwtTokenViewModel> UserAuthentication([FromBody] UserViewModel user)
        {

            GenericResponseObject<JwtTokenViewModel> genericResponseObject = new GenericResponseObject<JwtTokenViewModel>();
            genericResponseObject.IsSuccess = false;
            genericResponseObject.Message = ConstaintStingValue.TagConnectionFailed;
            if (ModelState.IsValid)
            {
                try
                {
                    UserViewModel userViewModel = _adminUOW.AdminAuthentication(user);
                    if (userViewModel != null)
                    {
                        string token = new CommonController(tokenOptions).GetToken(userViewModel, DateTime.UtcNow.AddDays(2));
                        genericResponseObject.Data = new JwtTokenViewModel
                        {
                            UserName = userViewModel.UserName,
                            UserId = userViewModel.UserId,
                            authenticated = true,
                            entityId = 1,
                            tokenExpires = DateTime.UtcNow.AddHours(2),
                            token = token,
                            SelectedRole = userViewModel.SelectedRole
                        };
                    }
                    else
                    {
                        genericResponseObject.SuccessMessage = ConstaintStingValue.Tag_No_Profile_key;
                    }

                    genericResponseObject.IsSuccess = true;
                    genericResponseObject.Message = ConstaintStingValue.TagConnectionSuccess;
                }
                catch (Exception exception)
                {
                    genericResponseObject.IsSuccess = true;
                    genericResponseObject.SuccessMessage = exception.Message;
                    genericResponseObject.ErrorCode = exception.HResult;
                    genericResponseObject.ExceptionErrorMessage = exception.StackTrace;
                    WriteExceptionToFile.WriteExceptionToFileInLogger(_hostingEnvironment, exception);
                }
            }

            return genericResponseObject;

        }

打字稿代碼

login(modelValue: UserViewModel, isValid: boolean) {
    if (isValid) {   this.genericHttpClientService.GenericHttpPostAndResponse<GenericResponseObject<JwtTokenViewModel>, UserViewModel>(this._userViewModel, this.commonConstantValue.adminLoginUrl).subscribe(item => {
                if (item.data!= null && item.data.authenticated) {
                  this.router.navigate(['admin-portal']);
                }else{
                  this.genericViewModel.successMessage = item.successMessage;
                }
                this.progressBarDisplay = false;
            },
            err => {
                console.log(err);
                this.progressBarDisplay = false;
            });

    }

HttpClient的

public GenericHttpPostAndResponse<T,TE>(postViewModel: TE, destinationUrl: string): Observable<T> {
    const headers = new HttpHeaders().set('Content-Type', 'application/json; charset=utf-8');
    return this.httpClientModule.post<T>(environment.baseUrl + destinationUrl, postViewModel, { headers });
}

錯誤：“請求的資源上沒有'Access-Control-Allow-Origin'標頭。” 在ionic2中

如何在ASP.net Core WebAPI中啟用CORS

https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-2.1

Answer 1

很難說真正的問題是什么。 我在CORS上的經驗是，實踐中比想象的要難。 我有一個類似的問題，這是由於我的站點需要Windows身份驗證。 事實證明，飛行前CORS請求需要匿名身份驗證。 我看到您的控制器具有AllowAnonymous屬性，但是，如果該屬性托管在IIS中，則該站點也需要具有匿名身份驗證。