asp.net web api - Microsoft.Owin.Cors doesn't return `Access-Control-Expose-Headers` -
many blog postings out on web today webapi 2.0 project , owin, enabling cors easy.
app.usecors(corsoptions.allowall);
however, i've never seen access-control-expose-headers
returned api, either in response or options preflight.
i've altered usecors
setup code explicitly set list of header names expose in cors policy.
i haven't cors knowledge assert microsoft.owin.cors
package broken, though have hunch , blogger's testing primitive apis.
armed information question on here, think library broken in respect cors specification.
cors - when return `access-control-expose-headers`
i'll switch using system.web.http.cors
package @thomas mentions in comment above.
Comments
Post a Comment