How to allow internal MVC Web Api from external site outside the network

by

You cannot access an internal-only site from JavaScript, as JavaScript runs client-side, on the end-user’s machine, outside of your internal network. The only way to hit the API via JavaScript is to either 1) expose the API to the external network or 2) create a proxy within your external site.

The proxy would be basically an action or actions that offer external access, and then translate the calls to your internal API. At the simplest, you could have a single action that basically responds to something like:

https://foo.com/api?endpoint=/internal/api/endpoint/&someParam=foo

The action would then take this information in the query string and use that to make a request to your internal API via something like HttpClient. However, this approach pretty much exposes your whole internal API, so you might as well just move it outside at that point. The better approach would be to create specific endpoints (action methods) for specific internal API calls you need to make via JavaScript.

UPDATE

It’s difficult to give you any real direction here without context. Let’s say that there’s an internal API endpoint that returns a list of widgets and you want to retrieve this list of widgets via AJAX. You would need something like:

public async Task<ActionResult> GetWidgets()
{
    // fetch widgets from internal API via HttpClient
    return Json(widgets, JsonRequestBehavior.AllowGet);
}

Then, your AJAX would call the URL for this action method on your website, which under the hood calls the internal API.

More Related Contents:

  1. What is ASP.NET Identity’s IUserSecurityStampStore interface?
  2. What is the difference between ‘classic’ and ‘integrated’ pipeline mode in IIS7?
  3. Is trying to develop for Medium Trust a lost cause?
  4. Asp.NET Web API – 405 – HTTP verb used to access this page is not allowed – how to set handler mappings
  5. Advantage of creating a generic repository vs. specific repository for each object?
  6. jqGrid: using multiple methods to filter data
  7. Has anyone implement RadioButtonListFor for ASP.NET MVC?
  8. Asp.Net Forms Authentication when using iPhone UIWebView
  9. How to programmatically clear outputcache for controller action method
  10. Why does the CheckBoxFor render an additional input tag, and how can I get the value using the FormCollection?
  11. How to receive JSON as an MVC 5 action method parameter
  12. How to add validation to my POCO(template) classes
  13. ASP.Net MVC Handling Segments with Route
  14. CORS support for PUT and DELETE with ASP.NET Web API
  15. mvc uppercase Model vs lowercase model
  16. I’m lost. What happened to ASP.NET MVC 5?
  17. Visual Studio 2012 Web Publish doesn’t copy files
  18. You must add a reference to assembly ‘netstandard, Version=2.0.0.0
  19. Is it a good practice to avoid using Session State in ASP.NET MVC? If yes, why and how?
  20. Creating a URL in the controller .NET MVC
  21. Paging & Sorting grids with ASP.Net MVC
  22. Web Config Transform not working
  23. New Asp.Net MVC5 project produces an infinite loop to login page
  24. JQuery’s $ is in conflict with that of StringTemplate.Net in ASP.Net MVC
  25. Adding sub-directory to “View/Shared” folder in ASP.Net MVC and calling the view
  26. Unable to Retrieve Metadata
  27. Change User Id type to int in ASP.NET Identity in VS2015
  28. Value cannot be null. Parameter name: items (DrodownList)
  29. All requests to ASP.NET Web API return 404 error
  30. ASP.NET session state and multiple worker processes

Leave a Comment