跨域需要服务端和客户端都作处理。
首先让asp.net core跨域，在nuget中添加Microsoft.AspNetCore.Cors的引用，然后在StartUp.cs中的ConfigureServices中添加如下代码：
|
1
2
3
4
|
var
urls =
"http://localhost:5000/"
;
services.AddCors(options =>
options.AddPolicy(
"MyDomain"
,
builder => builder.WithOrigins(urls).AllowAnyMethod().AllowAnyHeader().AllowAnyOrigin().AllowCredentials()));
|
再在Configure中添加
|
1
|
app.UseCors(
"AllowSameDomain"
);
|
|
1
2
|
再添加验证，添加Microsoft.AspNetCore.Authentication.Cookies引用
在Configure中添加
|
|
1
2
3
4
5
6
7
8
9
|
app.UseCookieAuthentication(
new
CookieAuthenticationOptions
{
AuthenticationScheme =
"validates"
,
LoginPath =
new
Microsoft.AspNetCore.Http.PathString(
"/login"
),
AccessDeniedPath =
new
Microsoft.AspNetCore.Http.PathString(
"/Home/Error"
),
AutomaticAuthenticate =
true
,
AutomaticChallenge =
true
,
SlidingExpiration =
true
});
|
在Controller中添加允许跨域特性，然后再添验证特性
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
using
Microsoft.AspNetCore.Mvc;
using
Microsoft.AspNetCore.Cors;
using
Microsoft.AspNetCore.Authorization;
using
System.Security.Claims;
namespace
WebUI.Controllers
{
[Authorize(Roles =
"Admin"
)]
[EnableCors(
"MyDomain"
)]
public
class
HomeController : Controller
{
/// <summary>
/// 测试方法
/// </summary>
/// <param name="item"></param>
/// <returns></returns>
[HttpPost(
"additem"
)]
public
IActionResult AddItem(Item item)
{
return
new
JsonResult(
new
{ Result = 0, Message =
"添加成功"
, Content = item.ToString(), UserName = User.Identity.Name },
new
Newtonsoft.Json.JsonSerializerSettings());
}
/// <summary>
/// 登录
/// </summary>
/// <param name="username">用户名</param>
/// <param name="password">密码</param>
/// <returns></returns>
[AllowAnonymous]
[HttpPost(
"login"
)]
public
IActionResult Login(
string
username,
string
password)
{
if
(username ==
"aaa"
&& password ==
"111"
)
{
var
user =
new
{ RoleType = 1, Name =
"张三丰"
, ID = 1 };
string
roleId = user.RoleType.ToString();
var
roleName =
""
;
switch
(roleId)
{
case
"1"
:
roleName =
"Admin"
;
//管理员
break
;
}
var
id = user.ID.ToString();
var
claims =
new
Claim[] {
new
Claim(ClaimTypes.UserData,roleId),
new
Claim(ClaimTypes.Role,roleName),
new
Claim(ClaimTypes.Name,username)
};
HttpContext.Authentication.SignInAsync(
"validates"
,
new
ClaimsPrincipal(
new
ClaimsIdentity(claims,
"Cookie"
)));
HttpContext.User =
new
ClaimsPrincipal(
new
ClaimsIdentity(claims));
return
new
JsonResult(
new
{ Message =
"登录成功"
},
new
Newtonsoft.Json.JsonSerializerSettings());
}
else
{
return
new
JsonResult(
new
{ Message =
"用户名或密码错误"
},
new
Newtonsoft.Json.JsonSerializerSettings());
}
}
}
}
|
在JQuery中，使用$.ajax登录后，才能执行保存，否则没有权限保存数据，重点时ajax请求时xhrFields: {withCredentials: true }这个属性，可以把登录后的cookie在后面的操作中带回服务端（关于原理不多说了）
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
<!DOCTYPE html>
<
html
>
<
head
>
<
meta
http-equiv
=
"Content-Type"
content
=
"text/html; charset=utf-8"
/>
<
title
></
title
>
<
meta
charset
=
"utf-8"
/>
<
script
src
=
"bower_components/jquery/dist/jquery.js"
></
script
>
</
head
>
<
body
>
<
input
id
=
"login"
value
=
"登录"
type
=
"button"
/>
<
input
id
=
"sava"
value
=
"保存"
type
=
"button"
/>
<
span
id
=
"message"
></
span
>
<
script
>
$("#login").click(function () {
$.ajax({
type: 'POST',
url: "http://localhost:5000/login",
data: { username: "aaa", password: "111" },
dataType: "json",
xhrFields: {
withCredentials: true
},
success: function (result) {
$("#message").html(result.Message);
},
error: function () {
$("#message").html("登录失败!");
}
});
})
$("#sava").click(function () {
$.ajax({
type: 'POST',
url: "http://localhost:5000/additem",
data: { ID: 112, Name: "李四", Birthday: "2017-01-23" },
dataType: "json",
//必须有这项的配置，不然cookie无法发送至服务端
xhrFields: {
withCredentials: true
},
success: function (result) {
$("#message").html(result.Message + result.Content + result.UserName);
},
error: function (xhr,status) {
$("#message").html(status);
}
});
})
</
script
>
</
body
>
</
html
>
|
来看一下测试结果：
当直接点保存时，系统会导航登录
登录
再次保存
本文转自桂素伟51CTO博客，原文链接： http://blog.51cto.com/axzxs/1894227，如需转载请自行联系原作者
