August 2017
Intermediate to advanced
330 pages
7h 26m
English
Content preview from Mastering ASP.NET Web API
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
CORS
Cross Origin Resource Sharing (CORS) allows cross origin apps to access the application. In case of web API, it's a faceless application that receives a request and returns a response; however, when this web API is consumed in another web application (using AJAX in JavaScript to call APIs), the client would be on a different domain.
Consider an example, the web API is hosted as www.packtdemo.com/api and the web application is hosted as www.packtdemoweb.com. When the web app calls, the API responds with No Access-Control-Allow-Origin header is present on the requested resource. This means your domain is not allowed to access API resources.
This CORS concept can also be used to limit any unwanted web applications to access the web API. ...