我在IIS上运行了一个.net WebAPI项目,启用了CORS。这个项目有一个授权处理程序,它在每个请求中检查一个名为"Token“的标头,现在它只检查它是否有一个字符串值。
在带有角的API调用中,我使用下面的行来添加标头。我从角度文件上拿了这个
$http.defaults.head ers.public‘’Token‘= 'C3POR2D2';
API的原始数据如下所示。
OPTIONS http://localhost:81/api/Sample/GetSubordinateRolesForUser/1 HTTP/1.1
Host: localhost:81
Connection: keep-alive
Access-Control-Request-Method: GET
Origin: http://localhost
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.45 Safari/537.36
Access-Control-Request-Headers: accept, token
Accept: */*
Referer: http://localhost/Account/Login
Accept-Encoding: gzip, deflate, sdch
Accept-Language: en-US,en;q=0.8
在这里,“令牌”显示为访问控制请求头下的值。这导致我的授权处理程序返回一个403禁止,因为它期待头部‘令牌’与一些字符串值。
以下是响应原始数据
HTTP/1.1 403 Forbidden
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Headers: Token
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE
Date: Wed, 07 Jan 2015 11:28:43 GMT
Content-Length: 0
我在这里错过了什么?
发布于 2015-01-07 03:59:02
用这个。我也面临着类似的问题
function getSettings(requestData) {
return {
url: requestData.url,
dataType: requestData.dataType || "json",
data: requestData.data || {},
headers: requestData.headers || {
"accept": "application/json; charset=utf-8",
'Authorization': requestData.token
},
async: requestData.async || "false",
cache: requestData.cache || "false",
success: requestData.success || {},
error: requestData.error || {},
complete: requestData.complete || {},
fail: requestData.fail || {}
};
}
像这样叫我
var requestData = {
url: 'your API end point',
data: project,
token: yourtoken
};
var settings = getSettings(requestData);
settings.method = "POST"; //Your request
return $http(settings);
并删除$http.defaults.head ers.public‘’Token‘= 'C3POR2D2';
https://stackoverflow.com/questions/27818657
复制