How to enable CORS in ASP.NET Core

by

For ASP.NET Core 6:

var  MyAllowSpecificOrigins = "_myAllowSpecificOrigins";

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddCors(options =>
{
    options.AddPolicy(name: MyAllowSpecificOrigins,
                      builder =>
                      {
                          builder.WithOrigins("http://example.com",
                                              "http://www.contoso.com");
                      });
});

// services.AddResponseCaching();

builder.Services.AddControllers();

var app = builder.Build();
app.UseHttpsRedirection();
app.UseStaticFiles();
app.UseRouting();

app.UseCors(MyAllowSpecificOrigins);

app.UseAuthorization();

app.MapControllers();

app.Run();

See the See the official docs for more samples.

For ASP.NET Core 3.1 and 5.0:

You have to configure a CORS policy at application startup in the ConfigureServices method:

public void ConfigureServices(IServiceCollection services)
{
    services.AddCors(o => o.AddPolicy("MyPolicy", builder =>
    {
        builder.WithOrigins("http://example.com")
               .AllowAnyMethod()
               .AllowAnyHeader();
    }));

    // ...
}

The CorsPolicyBuilder in builder allows you to configure the policy to your needs. You can now use this name to apply the policy to controllers and actions:

[EnableCors("MyPolicy")]

Or apply it to every request:

public void Configure(IApplicationBuilder app)
{
    app.UseCors("MyPolicy");

    // ...

    // This should always be called last to ensure that
    // middleware is registered in the correct order.
    app.UseMvc();
}

More Related Contents:

  1. ASP.NET Core Web API exception handling
  2. Dynamically change connection string in Asp.Net Core
  3. How should I inject a DbContext instance into an IHostedService?
  4. Timeouts with long running ASP.NET MVC Core Controller HTTPPost Method
  5. How to update values into appsetting.json?
  6. ASP.NET Core 2.0 LDAP Active Directory Authentication
  7. Enable OPTIONS header for CORS on .NET Core Web API
  8. Uploading and Downloading large files in ASP.NET Core 3.1?
  9. Get current URL in a Blazor component
  10. Read appsettings json values in .NET Core Test Project
  11. How to implement Permission Based Access Control with Asp.Net Core
  12. How do I setup multiple auth schemes in ASP.NET Core 2.0?
  13. How to consume a Scoped service from a Singleton?
  14. Upload files and JSON in ASP.NET Core Web API
  15. How to read values from the querystring with ASP.NET Core?
  16. ASP.NET Core 1.0 on IIS error 502.5 – Error Code 0x80004005
  17. Change the JSON serialization settings of a single ASP.NET Core controller
  18. Avoid or control circular references in Entity Framework Core
  19. Using IConfiguration in C# Class Library
  20. Read appsettings.json in Main Program.cs
  21. Error handling (Sending ex.Message to the client)
  22. Cannot find command ‘dotnet ef’
  23. How do I transform appsettings.json in a .NET Core MVC project?
  24. ASP.NET Core modify/substitute request body
  25. Configure input/output formatters on controllers with ASP.NET Core 2.1
  26. Sharing Cookies Between Two ASP.NET Core Applications
  27. Net Core: Execute All Dependency Injection in Xunit Test for AppService, Repository, etc
  28. Unable to resolve service for type ‘Microsoft.AspNetCore.Identity.UserManager` while attempting to activate ‘AuthController’
  29. ASP.NET 5 Authorize against two or more policies (OR-combined policy)
  30. Error: “There was an error running the selected code generator: Package restore failed”

Leave a Comment