<\/div>\n

Merhaba,<\/p>\n

Web Browserlar varsay\u0131lan olarak bir web sayfas\u0131 \u00fczerinden farkl\u0131 bir domaine<\/u> request ger\u00e7ekle\u015ftirildi\u011fi zaman g\u00fcvenlik amac\u0131yla bu iste\u011fi reddederler. B\u00f6ylece her web sitenin sade ve sadece kendi domaini alt\u0131ndaki adreslere istek yapabilmesini sa\u011flayarak, kullan\u0131c\u0131lar\u0131 k\u00f6t\u00fc ya da iyi zanla(niyet \u00f6nemli de\u011fil, nihayetinde onlar\u0131n r\u0131zas\u0131 olmadan) ba\u015fka sitelere istek g\u00f6ndermesini ama\u00e7layan ki\u015filere kar\u015f\u0131 engeli garanti alt\u0131na alm\u0131\u015f olurlar.<\/p>\n

Browserlar\u0131n bu davran\u0131\u015f\u0131na Same-Origin Policy<\/strong> denmektedir. Bu politika esas\u0131nda taray\u0131c\u0131lar\u0131n benimsedi\u011fi ilkeler setidir diyebiliriz. Browserlar i\u00e7in farkl\u0131 domain<\/u> demek;<\/p>\n

\n
protocol : protokol\u00fcn farkl\u0131 olmas\u0131,<\/li>\n
host : hostun farkl\u0131 olmas\u0131,<\/li>\n
port : portun farkl\u0131 olmas\u0131<\/li>\n<\/ul>\n
demektir. Dolay\u0131s\u0131yla bu \u00fc\u00e7l\u00fcn\u00fcn birle\u015fimi neticesinde ‘origin’ dedi\u011fimiz k\u00f6k domain ile istek yap\u0131lacak hedef domain aras\u0131nda uyum de\u011ferlendirilir ve fark s\u00f6z konusu de\u011filse taray\u0131c\u0131 taraf\u0131ndan istek ba\u015far\u0131yla sonu\u00e7land\u0131r\u0131l\u0131r.<\/p>\n
Browserlara dair bu \u00fc\u00e7l\u00fcyle \u00f6rnek vermemiz gerekirse;<\/p>\n\n\n\n\n\n\n\n\n\n\n
https:\/\/www.gencayyildiz.com<\/span> adresine uygun e\u015fle\u015ftirmeler a\u015fa\u011f\u0131da de\u011ferlendirilmi\u015ftir.<\/td>\n<\/tr>\n
Origin<\/th>\n Sonu\u00e7<\/th>\n Nedeni<\/th>\n<\/tr>\n<\/thead>\n
https:\/\/www.gencayyildiz.com\/page\/1<\/td>\n Ba\u015far\u0131l\u0131<\/td>\n protocol, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/www.gencayyildiz.com\/images\/rsm.png<\/td>\n Ba\u015far\u0131l\u0131<\/td>\n protocol, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/www.gencayyildiz.com:88<\/td>\n Ba\u015far\u0131s\u0131z<\/td>\n protocol ve host ayn\u0131, port farkl\u0131<\/td>\n<\/tr>\n
http:\/\/www.gencayyildiz.com<\/td>\n Ba\u015far\u0131s\u0131z<\/td>\n protocol farkl\u0131, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/gencayyildiz.com<\/td>\n Ba\u015far\u0131s\u0131z<\/td>\n protocol ve port ayn\u0131, host farkl\u0131<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Same-Origin Policy, zararl\u0131 sitelerin di\u011fer sitelerden veri okumas\u0131n\u0131 engelleyerek b\u00fcy\u00fck bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapat\u0131r.<\/strong><\/p><\/blockquote>\n
Browser \u0130ste\u011fi Reddedip Etmeyece\u011fini Nereden Bilecektir?<\/h4>\n
$\"Asp.NET$ <\/a><\/p>\n
Browser, yap\u0131lan request neticesinde gelen response’da –No ‘Access-Control-Allow-Origin’<\/span>– ifadesiyle kar\u015f\u0131la\u015f\u0131ld\u0131\u011f\u0131 taktirde ilgili API taraf\u0131nda istek yapan client’a dair izin verilmedi\u011fi anla\u015f\u0131larak Same-Origin Policy<\/em> devreye girer ve istek otomatikman reddedilir.
\n $\"Asp.NET$ <\/a>
\nCORS Politikalar\u0131 Nedir?<\/strong>
\nAPI’\u0131n hangi client’tan istek al\u0131p almayaca\u011f\u0131n\u0131 belirlemesi CORS politikalar\u0131 ayarlama diye nitelendirilebilir. CORS politikalar\u0131 bir g\u00fcvenlik \u00f6nleminden ziyade browserlardaki same-origin policy \u00f6nlemini hafifletmek i\u00e7in devreye giren yap\u0131lard\u0131r. <\/p>\n
CORS politiklar\u0131nda ilgili client’a dair izin verilen bir API’a yap\u0131lan istek neticesinde; API, gelen istekteki origin bilgisini denetler ve bu denetim neticesinde bir do\u011frulama ger\u00e7ekle\u015ftirilirse response’a –Access-Control-Allow-Origin:https:\/\/www.example.com<\/span>– de\u011ferini ekleyerek cevab\u0131 d\u00f6nd\u00fcr\u00fcr. Browser, d\u00f6nd\u00fcr\u00fclen de\u011ferdeki origin ile g\u00f6nderdi\u011fi origin’i k\u0131yaslayarak iste\u011fin ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131 kanaatine nihai olarak varmaktad\u0131r. <\/p>\n
CORS Politikas\u0131 Belirleme<\/h4>\n
Asp.NET Core uygulamalar\u0131nda CORS politikas\u0131 belirleyip farkl\u0131 clientlardan gelen istekleri kar\u015f\u0131layabilmek i\u00e7in Startup.cs dosyas\u0131nda ‘AddCors’ servisinin uygulamaya dahil edilmesi gerekmektedir.<\/p>\n
\r\n public class Startup\r\n {\r\n \r\n .\r\n .\r\n .\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddCors();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n
Bu i\u015flemden sonra bu servis arac\u0131l\u0131\u011f\u0131yla tan\u0131mlanan CORS politikas\u0131n\u0131 uygulamada devreye sokacak olan ‘UseCors’ middleware’ini \u00e7a\u011f\u0131rmam\u0131z gerekmektedir. Lakin bu i\u015flemi, a\u015fa\u011f\u0131da t\u00fcr\u00fcne g\u00f6re tan\u0131mlama yapt\u0131\u011f\u0131m\u0131z CORS politikalar\u0131 yakla\u015f\u0131mlar\u0131nda tek tek hususi olarak inceleyece\u011fiz.<\/p>\n
Genel CORS Politikas\u0131 Belirmele<\/strong>
\nOrigin’i yahut header’\u0131 ne olursa olsun client ay\u0131rmaks\u0131z\u0131n yap\u0131lan t\u00fcm isteklerin ba\u015far\u0131yla kar\u015f\u0131lanabilece\u011fini ifade etti\u011fimiz CORS politikas\u0131d\u0131r.<\/p>\n
\r\n services.AddCors(options =>\r\n options.AddDefaultPolicy(builder =>\r\n builder.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin()));\r\n<\/pre>\n
G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere ‘AllowAnyHeader’, ‘AllowAnyMethod’ ve ‘AllowAnyOrigin’ metotlar\u0131yla t\u00fcm clientlardan gelecek isteklere eri\u015fim izni verilmi\u015ftir.<\/p>\n
Bu \u015fekilde belirlenen CORS politikas\u0131n\u0131 kullanabilmek i\u00e7in uygulamada ‘UseRouting’ ile ‘UseAuthentication’ aras\u0131nda ‘UseCors’ middleware’ini \u00e7a\u011f\u0131rmam\u0131z yeterli olacakt\u0131r.<\/p>\n
\r\n public void Configure(IApplicationBuilder app, IWebHostEnvironment env)\r\n {\r\n app.UseRouting();\r\n app.UseCors();\r\n app.UseAuthentication();\r\n app.UseEndpoints(endpoints =>\r\n {\r\n endpoints.MapControllers();\r\n });\r\n }\r\n<\/pre>\n
Belirli Bir Hedefe CORS Politikas\u0131 Belirleme<\/strong>
\nSadece belirlenen clientlardan gelen istekleri kar\u015f\u0131layan CORS politikas\u0131d\u0131r.<\/p>\n
\r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/localhost:1453", "http:\/\/localhost:1453").AllowAnyMethod().AllowAnyHeader()));\r\n<\/pre>\n
Yukar\u0131daki kod blo\u011funu incelerseniz e\u011fer; ‘WithOrigins’ metodu ile belirli originlere izin verilmektedir.<\/p>\n
Bu \u015fekilde belirlenen CORS politikas\u0131nda ise ‘UseCors’ a\u015fa\u011f\u0131daki gibi yine ‘UseRouting’ ile ‘UseAuthentication’ aras\u0131nda kullan\u0131lmal\u0131d\u0131r.<\/p>\n
\r\n public void Configure(IApplicationBuilder app, IWebHostEnvironment env)\r\n {\r\n app.UseRouting();\r\n app.UseCors("myclients");\r\n app.UseAuthentication();\r\n app.UseEndpoints(endpoints =>\r\n {\r\n endpoints.MapControllers();\r\n });\r\n }\r\n<\/pre>\n
Subdomain’e Uygun CORS Politikas\u0131 Belirleme<\/strong>
\nBelirtilen domaine ait t\u00fcm subdomainler’e gelen istekleri kar\u015f\u0131layacak CORS politikas\u0131d\u0131r.<\/p>\n
\r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/*.example.com").SetIsOriginAllowedToAllowWildcardSubdomains()\r\n .AllowAnyHeader().AllowAnyMethod()\r\n ));\r\n<\/pre>\n
\r\n app.UseRouting();\r\n app.UseCors("myclients");\r\n app.UseAuthentication();\r\n<\/pre>\n
Controller veya Action Seviyesinde CORS Politikas\u0131 Belirleme<\/strong>
\nController seviyesinde CORS politikas\u0131 belirleyebilmek i\u00e7in \u00f6ncelikle ilgili politikan\u0131n tan\u0131mlanm\u0131\u015f olmas\u0131 gerekmektedir.<\/p>\n
\r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/localhost:5002", "https:\/\/localhost:44355").SetIsOriginAllowedToAllowWildcardSubdomains()\r\n .AllowAnyHeader().AllowAnyMethod()\r\n ));\r\n<\/pre>\n
Ard\u0131ndan ‘UseCors’ middleware’ini Startup’da herhangi bir politikan\u0131n ismini belirlemeksizin bo\u015f olarak \u00e7a\u011f\u0131r\u0131yoruz. Nihayetinde ilgili politika controller yahut action seviyesinde verilecektir.<\/p>\n
\r\n app.UseRouting();\r\n app.UseCors();\r\n app.UseAuthentication();\r\n<\/pre>\n
Son olarak ilgili controller ya da action’\u0131 ‘EnableCors’ attribute’u ile i\u015faretliyoruz.<\/p>\n
\r\n [ApiController]\r\n [Route("api\/[controller]")]\r\n [EnableCors("myclients")]\r\n public class ProductsController : ControllerBase\r\n {\r\n public string[] GetProducts()\r\n {\r\n return new string[] {\r\n "Telefon",\r\n "C\u00fczdan",\r\n "G\u00f6mlek",\r\n "Tablo"\r\n };\r\n }\r\n }\r\n<\/pre>\n
CORS Politikas\u0131n\u0131 Action Baz\u0131nda Ge\u00e7ersiz K\u0131lma<\/strong>
\nGenel yahut controller baz\u0131nda tan\u0131mlanan bir CORS politikas\u0131 varsa e\u011fer actionlarda ge\u00e7ersiz k\u0131lmak i\u00e7in ‘DisableCors’ attribute’unu kullanabiliriz.<\/p>\n
\r\n [ApiController]\r\n [Route("api\/[controller]")]\r\n [EnableCors("myclients")]\r\n public class ProductsController : ControllerBase\r\n {\r\n [DisableCors]\r\n public string[] GetProducts()\r\n {\r\n return new string[] {\r\n "Telefon",\r\n "C\u00fczdan",\r\n "G\u00f6mlek",\r\n "Tablo"\r\n };\r\n }\r\n }\r\n<\/pre>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Web Browserlar varsay\u0131lan olarak bir web sayfas\u0131 \u00fczerinden farkl\u0131 bir domaine request ger\u00e7ekle\u015ftirildi\u011fi zaman g\u00fcvenlik amac\u0131yla bu iste\u011fi reddederler. B\u00f6ylece her web sitenin sade ve sadece kendi domaini alt\u0131ndaki adreslere istek yapabilmesini sa\u011flayarak,...<\/p>\n","protected":false},"author":1,"featured_media":15517,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3102,2898,3103],"tags":[3471,3472,3473,3475,3474],"class_list":["post-15503","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asp-net-core","category-asp-net-core-3-0","category-asp-net-core-3-1","tag-asp-net-core-cors","tag-cors-politikasi","tag-cross-origin-resource-sharing","tag-orjinler-arasi-kaynak-paylasimi","tag-same-origin-policy"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=15503"}],"version-history":[{"count":44,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503\/revisions"}],"predecessor-version":[{"id":15549,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503\/revisions\/15549"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/15517"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=15503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=15503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=15503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

Origin<\/th>\n	Sonu\u00e7<\/th>\n	Nedeni<\/th>\n<\/tr>\n<\/thead>\n
https:\/\/www.gencayyildiz.com<\/span> adresine uygun e\u015fle\u015ftirmeler a\u015fa\u011f\u0131da de\u011ferlendirilmi\u015ftir.<\/td>\n<\/tr>\n
https:\/\/www.gencayyildiz.com\/page\/1<\/td>\n	Ba\u015far\u0131l\u0131<\/td>\n	protocol, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/www.gencayyildiz.com\/images\/rsm.png<\/td>\n	Ba\u015far\u0131l\u0131<\/td>\n	protocol, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/www.gencayyildiz.com:88<\/td>\n	Ba\u015far\u0131s\u0131z<\/td>\n	protocol ve host ayn\u0131, port farkl\u0131<\/td>\n<\/tr>\n
http:\/\/www.gencayyildiz.com<\/td>\n	Ba\u015far\u0131s\u0131z<\/td>\n	protocol farkl\u0131, host ve port ayn\u0131<\/td>\n<\/tr>\n
https:\/\/gencayyildiz.com<\/td>\n	Ba\u015far\u0131s\u0131z<\/td>\n	protocol ve port ayn\u0131, host farkl\u0131<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Same-Origin Policy, zararl\u0131 sitelerin di\u011fer sitelerden veri okumas\u0131n\u0131 engelleyerek b\u00fcy\u00fck bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapat\u0131r.<\/strong><\/p><\/blockquote>\n Browser \u0130ste\u011fi Reddedip Etmeyece\u011fini Nereden Bilecektir?<\/h4>\n $\"Asp.NET$ <\/a><\/p>\n Browser, yap\u0131lan request neticesinde gelen response’da –No ‘Access-Control-Allow-Origin’<\/span>– ifadesiyle kar\u015f\u0131la\u015f\u0131ld\u0131\u011f\u0131 taktirde ilgili API taraf\u0131nda istek yapan client’a dair izin verilmedi\u011fi anla\u015f\u0131larak Same-Origin Policy<\/em> devreye girer ve istek otomatikman reddedilir. \n $\"Asp.NET$ <\/a> \nCORS Politikalar\u0131 Nedir?<\/strong> \nAPI’\u0131n hangi client’tan istek al\u0131p almayaca\u011f\u0131n\u0131 belirlemesi CORS politikalar\u0131 ayarlama diye nitelendirilebilir. CORS politikalar\u0131 bir g\u00fcvenlik \u00f6nleminden ziyade browserlardaki same-origin policy \u00f6nlemini hafifletmek i\u00e7in devreye giren yap\u0131lard\u0131r. <\/p>\n CORS politiklar\u0131nda ilgili client’a dair izin verilen bir API’a yap\u0131lan istek neticesinde; API, gelen istekteki origin bilgisini denetler ve bu denetim neticesinde bir do\u011frulama ger\u00e7ekle\u015ftirilirse response’a –Access-Control-Allow-Origin:https:\/\/www.example.com<\/span>– de\u011ferini ekleyerek cevab\u0131 d\u00f6nd\u00fcr\u00fcr. Browser, d\u00f6nd\u00fcr\u00fclen de\u011ferdeki origin ile g\u00f6nderdi\u011fi origin’i k\u0131yaslayarak iste\u011fin ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131 kanaatine nihai olarak varmaktad\u0131r. <\/p>\n CORS Politikas\u0131 Belirleme<\/h4>\n Asp.NET Core uygulamalar\u0131nda CORS politikas\u0131 belirleyip farkl\u0131 clientlardan gelen istekleri kar\u015f\u0131layabilmek i\u00e7in Startup.cs dosyas\u0131nda ‘AddCors’ servisinin uygulamaya dahil edilmesi gerekmektedir.<\/p>\n \r\n public class Startup\r\n {\r\n \r\n .\r\n .\r\n .\r\n public void ConfigureServices(IServiceCollection services)\r\n {\r\n .\r\n .\r\n .\r\n services.AddCors();\r\n .\r\n .\r\n .\r\n }\r\n .\r\n .\r\n .\r\n }\r\n<\/pre>\n Bu i\u015flemden sonra bu servis arac\u0131l\u0131\u011f\u0131yla tan\u0131mlanan CORS politikas\u0131n\u0131 uygulamada devreye sokacak olan ‘UseCors’ middleware’ini \u00e7a\u011f\u0131rmam\u0131z gerekmektedir. Lakin bu i\u015flemi, a\u015fa\u011f\u0131da t\u00fcr\u00fcne g\u00f6re tan\u0131mlama yapt\u0131\u011f\u0131m\u0131z CORS politikalar\u0131 yakla\u015f\u0131mlar\u0131nda tek tek hususi olarak inceleyece\u011fiz.<\/p>\n Genel CORS Politikas\u0131 Belirmele<\/strong> \nOrigin’i yahut header’\u0131 ne olursa olsun client ay\u0131rmaks\u0131z\u0131n yap\u0131lan t\u00fcm isteklerin ba\u015far\u0131yla kar\u015f\u0131lanabilece\u011fini ifade etti\u011fimiz CORS politikas\u0131d\u0131r.<\/p>\n \r\n services.AddCors(options =>\r\n options.AddDefaultPolicy(builder =>\r\n builder.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin()));\r\n<\/pre>\n G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere ‘AllowAnyHeader’, ‘AllowAnyMethod’ ve ‘AllowAnyOrigin’ metotlar\u0131yla t\u00fcm clientlardan gelecek isteklere eri\u015fim izni verilmi\u015ftir.<\/p>\n Bu \u015fekilde belirlenen CORS politikas\u0131n\u0131 kullanabilmek i\u00e7in uygulamada ‘UseRouting’ ile ‘UseAuthentication’ aras\u0131nda ‘UseCors’ middleware’ini \u00e7a\u011f\u0131rmam\u0131z yeterli olacakt\u0131r.<\/p>\n \r\n public void Configure(IApplicationBuilder app, IWebHostEnvironment env)\r\n {\r\n app.UseRouting();\r\n app.UseCors();\r\n app.UseAuthentication();\r\n app.UseEndpoints(endpoints =>\r\n {\r\n endpoints.MapControllers();\r\n });\r\n }\r\n<\/pre>\n Belirli Bir Hedefe CORS Politikas\u0131 Belirleme<\/strong> \nSadece belirlenen clientlardan gelen istekleri kar\u015f\u0131layan CORS politikas\u0131d\u0131r.<\/p>\n \r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/localhost:1453", "http:\/\/localhost:1453").AllowAnyMethod().AllowAnyHeader()));\r\n<\/pre>\n Yukar\u0131daki kod blo\u011funu incelerseniz e\u011fer; ‘WithOrigins’ metodu ile belirli originlere izin verilmektedir.<\/p>\n Bu \u015fekilde belirlenen CORS politikas\u0131nda ise ‘UseCors’ a\u015fa\u011f\u0131daki gibi yine ‘UseRouting’ ile ‘UseAuthentication’ aras\u0131nda kullan\u0131lmal\u0131d\u0131r.<\/p>\n \r\n public void Configure(IApplicationBuilder app, IWebHostEnvironment env)\r\n {\r\n app.UseRouting();\r\n app.UseCors("myclients");\r\n app.UseAuthentication();\r\n app.UseEndpoints(endpoints =>\r\n {\r\n endpoints.MapControllers();\r\n });\r\n }\r\n<\/pre>\n Subdomain’e Uygun CORS Politikas\u0131 Belirleme<\/strong> \nBelirtilen domaine ait t\u00fcm subdomainler’e gelen istekleri kar\u015f\u0131layacak CORS politikas\u0131d\u0131r.<\/p>\n \r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/*.example.com").SetIsOriginAllowedToAllowWildcardSubdomains()\r\n .AllowAnyHeader().AllowAnyMethod()\r\n ));\r\n<\/pre>\n \r\n app.UseRouting();\r\n app.UseCors("myclients");\r\n app.UseAuthentication();\r\n<\/pre>\n Controller veya Action Seviyesinde CORS Politikas\u0131 Belirleme<\/strong> \nController seviyesinde CORS politikas\u0131 belirleyebilmek i\u00e7in \u00f6ncelikle ilgili politikan\u0131n tan\u0131mlanm\u0131\u015f olmas\u0131 gerekmektedir.<\/p>\n \r\n services.AddCors(options =>\r\n options.AddPolicy("myclients", builder =>\r\n builder.WithOrigins("https:\/\/localhost:5002", "https:\/\/localhost:44355").SetIsOriginAllowedToAllowWildcardSubdomains()\r\n .AllowAnyHeader().AllowAnyMethod()\r\n ));\r\n<\/pre>\n Ard\u0131ndan ‘UseCors’ middleware’ini Startup’da herhangi bir politikan\u0131n ismini belirlemeksizin bo\u015f olarak \u00e7a\u011f\u0131r\u0131yoruz. Nihayetinde ilgili politika controller yahut action seviyesinde verilecektir.<\/p>\n \r\n app.UseRouting();\r\n app.UseCors();\r\n app.UseAuthentication();\r\n<\/pre>\n Son olarak ilgili controller ya da action’\u0131 ‘EnableCors’ attribute’u ile i\u015faretliyoruz.<\/p>\n \r\n [ApiController]\r\n [Route("api\/[controller]")]\r\n [EnableCors("myclients")]\r\n public class ProductsController : ControllerBase\r\n {\r\n public string[] GetProducts()\r\n {\r\n return new string[] {\r\n "Telefon",\r\n "C\u00fczdan",\r\n "G\u00f6mlek",\r\n "Tablo"\r\n };\r\n }\r\n }\r\n<\/pre>\n CORS Politikas\u0131n\u0131 Action Baz\u0131nda Ge\u00e7ersiz K\u0131lma<\/strong> \nGenel yahut controller baz\u0131nda tan\u0131mlanan bir CORS politikas\u0131 varsa e\u011fer actionlarda ge\u00e7ersiz k\u0131lmak i\u00e7in ‘DisableCors’ attribute’unu kullanabiliriz.<\/p>\n \r\n [ApiController]\r\n [Route("api\/[controller]")]\r\n [EnableCors("myclients")]\r\n public class ProductsController : ControllerBase\r\n {\r\n [DisableCors]\r\n public string[] GetProducts()\r\n {\r\n return new string[] {\r\n "Telefon",\r\n "C\u00fczdan",\r\n "G\u00f6mlek",\r\n "Tablo"\r\n };\r\n }\r\n }\r\n<\/pre>\n \u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle… \nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere… \n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n","protected":false},"excerpt":{"rendered":" Merhaba, Web Browserlar varsay\u0131lan olarak bir web sayfas\u0131 \u00fczerinden farkl\u0131 bir domaine request ger\u00e7ekle\u015ftirildi\u011fi zaman g\u00fcvenlik amac\u0131yla bu iste\u011fi reddederler. B\u00f6ylece her web sitenin sade ve sadece kendi domaini alt\u0131ndaki adreslere istek yapabilmesini sa\u011flayarak,...<\/p>\n","protected":false},"author":1,"featured_media":15517,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3102,2898,3103],"tags":[3471,3472,3473,3475,3474],"class_list":["post-15503","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asp-net-core","category-asp-net-core-3-0","category-asp-net-core-3-1","tag-asp-net-core-cors","tag-cors-politikasi","tag-cross-origin-resource-sharing","tag-orjinler-arasi-kaynak-paylasimi","tag-same-origin-policy"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=15503"}],"version-history":[{"count":44,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503\/revisions"}],"predecessor-version":[{"id":15549,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15503\/revisions\/15549"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/15517"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=15503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=15503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=15503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}