啟用跨原始來源要求Cors

  • 14
  • 0
  • 2025-06-02

net core Cors

 services.AddCors(options =>
{
 options.AddDefaultPolicy(builder =>
  builder.SetIsOriginAllowed(_ => true)
   .AllowAnyMethod()
   .AllowAnyHeader()
   .AllowCredentials());
}); 

services.AddCors(options =>
{
 options.AddPolicy("CorsName",
  policy =>
  {
   policy.WithOrigins("https://domain")  //站台
    .AllowAnyHeader()
    .AllowAnyMethod();
  });
});

startup.cs

[EnableCors("CorsName")]
[Route("api/[controller]")]
[ApiController]
public class NameController : ControllerBase
{

}

https://learn.microsoft.com/zh-tw/aspnet/core/security/cors?view=aspnetcore-9.0