ASP.NET Core Web API?? CORS(Cross-Origin Resource Sharing) ??

? ?????? ASP.NET Core Web API?? CORS? ????? ? ?? ?? ??, ? ???? ??? ?? ?? ?? ??? ?????.

?? 1: ???? ?? CORS ??

?? ???? ???? ?? ??? Microsoft.AspNetCore.Cors NuGet ???

1. ??? ??:

   <code>Install-Package Microsoft.AspNetCore.Cors</code>

2. CORS ??? ??:

   Startup.cs ?? ??? CORS ???? ?????.

   public void ConfigureServices(IServiceCollection services)
   {
       services.AddCors();
       // ... other service configurations
   }

3. CORS ???? ??:

   Configure ?????? app.UseCors ????? ???? ???? ??? HTTP ???? ?????. "http://example.com"? ?? ??? ??? ????.

   public void Configure(IApplicationBuilder app, IWebHostEnvironment env, ... )
   {
       app.UseCors(options => options.WithOrigins("http://example.com").AllowAnyMethod());
       // ... other middleware configurations
   }

?? 2: ?? ?? ??(?? ??)

???? ?? ??? ????? ?? ?? HTTP ??? CORS ??? ?? ??? ? ????. ?? ????? ?? ?? ??? ??? ?? ? ?????.

app.Use(async (context, next) =>
{
    context.Response.Headers.Add("Access-Control-Allow-Origin", "http://example.com");
    context.Response.Headers.Add("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE");
    context.Response.Headers.Add("Access-Control-Allow-Headers", "X-PINGOTHER, Content-Type, Authorization");

    await next.Invoke();
});

? ????? ?? app.UseRouting() ?? ?? ???? ???? ?? ???

?? ?? ??:

• *???? ??? ????? ???(`):** Avoid using the wildcard"*"forWithOrigins`. ??? ?? ?? ??? ??? API? ?? ??? ?? ??? ?????.
• ?? ??: AddCustomHeader ?? ??? ??? ???? ??? ???? ???? ??? ???? ?????. ?? "Content-Type"? ?????.
• ?? ??: ?? ???? ??? ???? Microsoft.AspNetCore.Cors ????? ???? CORS ?? ??? ?????. ?? ?? ??? ??? ? ??? ????? ???????.

? ??? ???? ASP.NET Core Web API?? CORS ??? ?? ? ??? ??? ??? ??? ?????. ??? ??? ?? ??? ??? ???? ?? ?? ??? ????? ??????.

? ??? ASP.NET Core Web API?? CORS? ????? ??? ??????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!