ASP.NET Web Forms: No 'Access-Control-Allow-Origin' header is present on the requested resource

Question

I know that similar questions have been asked but I tried almost all of them and none of them worked.

I need to simply allow a separate website (mywebsite.com) to access the Web API Methods of another web service (myserver.com) (coded on ASP.NET Web API and Hosted on azure)

Server code:

public class MyController : ApiController
{
     [EnableCors(origins: "http://mywebsite.com", headers: "*", methods: "*")]
     [Route("api/sendrequest")]
     [HttpPost]
     public IHttpActionResult SendRequest()
     {
          string response = "You made it to the server!";

          return Ok(new { response });
     }
}

Client side Ajax request:

function send_data() {

    var values = "Hello from Client";

    $.ajax({
        url: "https://myserver.com/api/mycontroller/sendrequest",
        type: "POST",
        data: values,
        success: function (response) {
            alert(response);
            console.log(response);
        },
        error: function (jqXHR, textStatus, errorThrown) {
            console.log(textStatus, errorThrown);
            alert("error");
        }

    });
}

Even though I've allowed this specific website to communicate with the server, it still returns me this error in the console:

XMLHttpRequest cannot load https://myserver.com/api/mycontroller/sendrequest.

No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://mywebsite.com' is therefore not allowed access. The response had HTTP status code 500.

What am I doing wrong here? Should I include any additional details in the request header?

Kahbazi · Accepted Answer · 2016-08-14 06:06:59Z

2

You need to config your web.config !

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <configSections>
  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <add name="Access-Control-Allow-Origin" value="*" />
        <add name="Access-Control-Allow-Methods" value="GET,POST,OPTIONS" />
        <add name="Access-Control-Allow-Headers" value="Content-Type, soapaction" />
      </customHeaders>
    </httpProtocol>
  </system.webServer>
</configuration>

answered Aug 14, 2016 at 6:06

Kahbazi

15.1k3 gold badges52 silver badges80 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Jay Over a year ago

Wouldn't that allow any origin to connect? Sorry I am new to this :)

Jay Over a year ago

Also by using [EnableCors(origins: "http://mywebsite.com", headers: "*", methods: "*")] I think I've already configured the server to allow my site to access it?

Collectives™ on Stack Overflow

ASP.NET Web Forms: No 'Access-Control-Allow-Origin' header is present on the requested resource

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related