Mid ASP.NET Core

Handling cross-origin credentials?

  • To allow cookies or credentials in cross-origin requests, configure:

builder.WithOrigins("

.AllowCredentials()

.AllowAnyHeader()

.AllowAnyMethod();

  • Clients must send requests with credentials: 'include'.
  • Note: Allowing credentials disables the wildcard (*) origin.

More from ASP.NET Core Tutorial

All questions for this course