XMLHttpRequest:网络错误访问被拒绝

本文关键字：拒绝 访问 错误 网络 XMLHttpRequest | 更新日期: 2023-09-27 18:32:50

我有一个MVC 4应用程序使用angular向Web API应用程序发出http POSTS请求。在开发环境中一切都按预期工作，但是当部署到我们的生产环境时，我在浏览器的控制台日志中收到以下错误

XMLHttpRequest: Network Error 0x80070005, Access is denied.

这看起来像一个 CORS 问题，我将以下代码添加到我的 web.config 中

<system.webServer>
<handlers>
  <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
  <remove name="OPTIONSVerbHandler" />
  <remove name="TRACEVerbHandler" />
  <add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="*" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0" />
</handlers>
<httpProtocol>
  <customHeaders>
    <clear />
    <add name="Access-Control-Allow-Origin" value="*" />
    <add name="Access-Control-Allow-Methods" value="GET, PUT, POST, DELETE, HEAD, OPTIONS" />
    <add name="Access-Control-Allow-Headers" value="Origin, X-Requested-With, Content-Type, Accept" />
  </customHeaders>
</httpProtocol>

并按照 Web API 2 中的启用跨源请求 ASP.NET 但无济于事。我还缺少什么吗？

XMLHttpRequest:网络错误访问被拒绝

好的

，我从我的web.config中删除了以下代码

<httpProtocol>
  <customHeaders>
   <clear />
    <add name="Access-Control-Allow-Origin" value="*" />
    <add name="Access-Control-Allow-Methods" value="GET, PUT, POST, DELETE, HEAD, OPTIONS" />
    <add name="Access-Control-Allow-Headers" value="Origin, X-Requested-With, Content-Type, Accept" />
  </customHeaders>
</httpProtocol>

并为我的 Web API 编写了自定义 CORS 策略属性类

[AttributeUsage(AttributeTargets.Method | AttributeTargets.Class, AllowMultiple = false)]
public class CrestCorsPolicyAttribute : Attribute, ICorsPolicyProvider 
{
    private readonly CorsPolicy _policy;
    public CrestCorsPolicyAttribute()
    {
        _policy = new CorsPolicy
        {
            AllowAnyMethod = true,
            AllowAnyHeader = true
        };
        var allowedOrigins = ConfigurationManager.AppSettings["AllowedOrigins"].Split(',');
        foreach (var allowedOrigin in allowedOrigins)
        {
            _policy.Origins.Add(allowedOrigin);
        }
    }
    public Task<CorsPolicy> GetCorsPolicyAsync
        (
        HttpRequestMessage request, 
        CancellationToken cancellationToken
        )
    {
        return Task.FromResult(_policy);
    }
}

我从我的 Global.asax 文件中实现的

GlobalConfiguration.Configuration.EnableCors(new CrestCorsPolicyAttribute());
相关文章：