Trying different settings for CORS.

renemadsen · renemadsen · commit 6a872c448476 · 2018-11-08T09:13:48.000+01:00
diff --git a/eFormAPI/eFormAPI/App_Start/WebApiConfig.cs b/eFormAPI/eFormAPI/App_Start/WebApiConfig.cs
@@ -21,7 +21,7 @@ public static void Register(HttpConfiguration config)
         {
             // Web API configuration and services
             // Configure Web API to use only bearer token authentication.
-            var corsAttr = new EnableCorsAttribute("*", "*", "*");
+            var corsAttr = new EnableCorsAttribute("*", "content-type", "GET");
             config.EnableCors(corsAttr);
             config.SuppressDefaultHostAuthentication();
             config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));
diff --git a/eFormAPI/eFormAPI/Controllers/EntitySelectController.cs b/eFormAPI/eFormAPI/Controllers/EntitySelectController.cs
@@ -132,7 +132,7 @@ public OperationDataResult<EntityGroup> GetEntityGroup(string entityGroupUid)
         [HttpGet]
         [AllowAnonymous]
         [Route("api/selectable-groups/get/exchange/{entityGroupUid}")]
-        [EnableCors(origins: "*", headers: "*", methods: "*")]
+        [EnableCors(origins: "*", headers: "content-type", methods: "GET")]
         public OperationDataResult<EntityGroup> GetEntityGroupExternally(string entityGroupUid, string token, string callerURL)
         {
             // Do some validation of the token. For now token is not valid

Original file line number	Diff line number	Diff line change
`@@ -21,7 +21,7 @@ public static void Register(HttpConfiguration config)`
`21`	`21`	`{`
`22`	`22`	`// Web API configuration and services`
`23`	`23`	`// Configure Web API to use only bearer token authentication.`
`24`		`- var corsAttr = new EnableCorsAttribute("", "", "*");`
	`24`	`+ var corsAttr = new EnableCorsAttribute("*", "content-type", "GET");`
`25`	`25`	`config.EnableCors(corsAttr);`
`26`	`26`	`config.SuppressDefaultHostAuthentication();`
`27`	`27`	`config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));`
Original file line number	Diff line number	Diff line change
`@@ -132,7 +132,7 @@ public OperationDataResult<EntityGroup> GetEntityGroup(string entityGroupUid)`
`132`	`132`	`[HttpGet]`
`133`	`133`	`[AllowAnonymous]`
`134`	`134`	`[Route("api/selectable-groups/get/exchange/{entityGroupUid}")]`
`135`		`- [EnableCors(origins: "", headers: "", methods: "*")]`
	`135`	`+ [EnableCors(origins: "*", headers: "content-type", methods: "GET")]`
`136`	`136`	`public OperationDataResult<EntityGroup> GetEntityGroupExternally(string entityGroupUid, string token, string callerURL)`
`137`	`137`	`{`
`138`	`138`	`// Do some validation of the token. For now token is not valid`