fix(src/knifehub.web/program.cs): cors

The CORS protocol does not allow specifying a wildcard (any) origin and credentials at the same time
yiyungent · Oct 22, 2024 · cf25999 · cf25999
1 parent a55486e
commit cf25999
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/src/KnifeHub.Web/Program.cs b/src/KnifeHub.Web/Program.cs
@@ -125,7 +125,15 @@ public static void Main(string[] args)
                     if (configOptions.AllowAllCors)
                     {
                         Log.Information("Cors: AllowAllCors");
-                        builder.Services.AddCors(m => m.AddPolicy("AllowAllCors", a => a.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod().AllowCredentials()));
+                        // System.InvalidOperationException: The CORS protocol does not allow specifying a wildcard (any) origin and credentials at the same time. Configure the CORS policy by listing individual origins if credentials needs to be supported.
+                        builder.Services.AddCors(m =>
+                            m.AddPolicy("AllowAllCors",
+                                a => a
+                                //.AllowAnyOrigin()
+                                .SetIsOriginAllowed(_ => true)
+                                .AllowAnyHeader()
+                                .AllowAnyMethod()
+                                .AllowCredentials()));
                     }
                     else
                     {