如何在 .net core 3.1 中删除一个控制器操作的 CORS 限制

Question

如何删除一个控制器操作的 CORS 限制

我已经为我的一个应用程序在一个地方为所有控制器/所有操作实施了 CORS。 但不知道如何取消对单个控制器的此限制

我在另一个地方的代码是

public static IWebHostBuilder BuildWebHost(string[] args) => WebHost.CreateDefaultBuilder(args).
            ConfigureKestrel(serverOptions =>
            {
            }).UseIISIntegration()
            .UseStartup<StartupShutdownHandler>();
        private const string MyAllowSpecificOrigins = "_myAllowSpecificOrigins";

        public StartupShutdownHandler(IConfiguration configuration)
        {
            Configuration = configuration;
        }

        public IConfiguration Configuration { get; }        
        public void ConfigureServices(IServiceCollection services)
        {
            services.AddControllers();
            CorsRelatedPolicyAddition(services);
            services.Configure<ForwardedHeadersOptions>(options =>
            {
                options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
            });        }

        private void CorsRelatedPolicyAddition(IServiceCollection services)
        {

                services.AddCors(options =>
                {
                    options.AddPolicy(MyAllowSpecificOrigins, builder => { builder.AllowedAnyOrigins().AllowAnyMethod().AllowAnyHeader(); });
                });

        }        
        public void Configure(IApplicationBuilder app, IWebHostEnvironment env, IHostApplicationLifetime applicationLifetime)
        {...


            app.UseCors(MyAllowSpecificOrigins);

            ..

        }

Answer 1

对于整个控制器（其中的所有方法）

[EnableCors(origins: "http://www.example.com", headers: "*", methods: "*")]
 public class TestController : ApiController
 {
    // Controller methods not shown...
 }

仅适用于特定方法

[EnableCors(origins: "http://www.example.com", headers: "*", methods: "*")]
public HttpResponseMessage GetItem(int id) { ... }

更多详情请看link