ASP.NET Core Swagger 在 Chrome 中无法正常工作，出现 CORS 错误

Question

我一直在关注 ASP.NET Web API Help Pages using Swagger 的帮助，但在 Chrome 中收到以下错误：

无法从服务器读取。它可能没有适当的访问控制来源设置。

它在 IE10 中工作，但它似乎没有接受更改。

我发现以下条目不幸的是，它指的是在 grunt 下更改它，而现在它在 gulp 下工作。

我还尝试更改 ASP.NET 核心中的 CORS 设置：

 public void ConfigureServices(IServiceCollection services)
    {
        // Add framework services.
        services.AddApplicationInsightsTelemetry(Configuration);

        services.AddMvc();

        // Inject an implementation of ISwaggerProvider with defaulted settings applied
        services.AddSwaggerGen();


        services.ConfigureSwaggerGen(options =>
        {
            options.SingleApiVersion(new Info
            {
                Version = "v1",
                Title = "Status API",
                Description = "A simple example ASP.NET Core Web API!",
                TermsOfService = "None",
                Contact = new Contact { Name = "A Persone", Email = "some-support@some-company.com", Url = "http://www.some-company.com/" },
                License = new License { Name = "Use under LICX", Url = "http://url.com" }
            });
        });

        services.AddCors(options =>
        {
            options.AddPolicy("AnyOrigin", builder =>
            {
                builder
                    .AllowAnyOrigin()
                    .AllowAnyMethod();
            });
        });
    }

public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
    {
        loggerFactory.AddConsole(Configuration.GetSection("Logging"));
        loggerFactory.AddDebug();

        app.UseApplicationInsightsRequestTelemetry();

        app.UseApplicationInsightsExceptionTelemetry();

        app.UseMvc();

        // Enable middleware to serve generated Swagger as a JSON endpoint
        app.UseSwagger();

        // Enable middleware to serve swagger-ui assets (HTML, JS, CSS etc.)
        app.UseSwaggerUi();

        app.UseCors("AnyOrigin");

    }

不幸的是，这没有任何区别。

非常欢迎提出有关如何通过更改 gulp 设置或 .NET 更改来解决问题的建议

Answer 1

通常这应该可以解决问题，您只需要它具有相同的策略名称即可。我不认为添加过滤器是必要的，如果你想将它应用到所有 requests/routes。

// ConfigureServices
services.AddCors(options =>
{
    options.AddPolicy("AnyOrigin", builder =>
    {
        builder
            .AllowAnyOrigin()
            .AllowAnyMethod();
    });
});

// Configure
app.UseCors("AnyOrigin");
// Register other middleware here, like UseMvc or UseStaticFiles, depending on if you 
// want StaticFiles to be affected by cors or not you put it before or after the UseCors call

更新

就像上面评论中提到的，中间件是按照注册的方式执行的。该请求在 Cors 中间件收到它之前到达您的 APi 控制器。

您的 Configure 方法必须如下所示：

public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
{
    loggerFactory.AddConsole(Configuration.GetSection("Logging"));
    loggerFactory.AddDebug();

    app.UseApplicationInsightsRequestTelemetry();

    app.UseApplicationInsightsExceptionTelemetry();

    // it must be placed before UseMvc and before or after
    // UseStaticFiles, depending on if you want the static files to be 
    // Cors enabled or not 
    app.UseCors("AnyOrigin");

    app.UseMvc();

    // Enable middleware to serve generated Swagger as a JSON endpoint
    app.UseSwagger();

    // Enable middleware to serve swagger-ui assets (HTML, JS, CSS etc.)
    app.UseSwaggerUi();
}

ASP.NET Core Swagger 在 Chrome 中无法正常工作，出现 CORS 错误

ASP.NET Core Swagger not working in Chrome with CORS error

swagger-ui

.net-core

asp.net-core