cors in umbraco 10 how to - Using Umbraco And Getting Started

Go to solution

Press Ctrl / CMD + C to copy this to your clipboard.

Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

Biagio Paruolo 1593 posts 1824 karma points c-trib

Oct 10, 2022 @ 11:20

CORS in Umbraco 10: How to?

Using Umbraco And Getting Started

Umbraco 9

I create this code in program.cs

    public static IHostBuilder CreateHostBuilder(string[] args) =>
        Host.CreateDefaultBuilder(args)
            .ConfigureUmbracoDefaults()
            .ConfigureWebHostDefaults(webBuilder =>
            {
                webBuilder.ConfigureServices(services => services.AddCors(options => options.AddPolicy("MyCors", policy =>
                {
                    policy.AllowAnyOrigin()
                        .AllowAnyHeader()
                        .AllowAnyMethod();
                })));
                webBuilder.UseStaticWebAssets();
                webBuilder.UseStartup<Startup>();
            });
}

and the enabled into startup.cs

public void Configure(IApplicationBuilder app, IWebHostEnvironment env) {

        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
        }


        app.UseCors("MyCors");
        app.UseUmbraco()
            .WithMiddleware(u =>
            {
                u.UseBackOffice();
                u.UseWebsite();
            })
            .WithEndpoints(u =>
            {
                u.UseInstallerEndpoints();
                u.UseBackOfficeEndpoints();
                u.UseWebsiteEndpoints();
            });
    }

But it's not applied the CORS policy and there is not any doc about it. I use U10.2.1. How to? Thanks.

Copy Link

Biagio Paruolo 1593 posts 1824 karma points c-trib

Oct 10, 2022 @ 12:36

I create this and it works.

Program.cs as by default code. Into the startup.cs:

Into the ConfigureServices:

   services.AddCors(options =>
            {
                //options.AddPolicy("AllowDashboardOrigin",
                //    builder => builder.SetIsOriginAllowed((host) => true).WithOrigins("http://*:*", "https://*:*", "http://localhost:8080", "http://sebapi.redspace.eu", "https://sebapi.azurewebsites.net").AllowAnyMethod().AllowAnyHeader());


                options.AddPolicy("AllowDashboardOrigin",
                             builder => builder.SetIsOriginAllowed((host) => true).AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader());

            });

Then in the Configure add before app.UseUmbraco()...:

app.UseCors("AllowDashboardOrigin");

Copy Link

Johannes Lantz 156 posts 838 karma points c-trib

Nov 30, 2023 @ 12:56

I had to place app.UseCors("AllowDashboardOrigin"); inside WithMiddleware in order to make it work

        app.UseUmbraco()
            .WithMiddleware(u =>
            {
                app.UseCors("AllowDashboardOrigin");
                u.UseBackOffice();
                u.UseWebsite();
            })
            .WithEndpoints(u =>
            {
                u.UseInstallerEndpoints();
                u.UseBackOfficeEndpoints();
                u.UseWebsiteEndpoints();
            });

Copy Link

Dirk Seefeld 126 posts 665 karma points

Dec 13, 2022 @ 10:22

0

Works with version 11.0.0 too.

Copy Link
Chris Spanellis 45 posts 189 karma points

Oct 27, 2023 @ 17:52

0

Can anyone expand on whether or not the order of when this happens matters? Does this need to happen before all of the Umbraco Builder calls when adding?

And what if we're using UseHsts and/or UseHttpsRedirection. Does the order matter of when we call UseCors?

Copy Link
is working on a reply...

Please Sign in or register to post replies