在ASP.NET Core 3.1中处理多个环境的CORS策略

public void ConfigureServices(IServiceCollection services)
{
    services.AddCors(options =>
    {
        options.AddPolicy("AllowAll", builder =>
        {
            builder.AllowAnyOrigin()
                   .AllowAnyMethod()
                   .AllowAnyHeader();
        });
    });

    // 其他服务配置...
}

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    // 其他中间件配置...

    app.UseCors("AllowAll");

    // 其他中间件配置...
}

[ApiController]
[Route("api/[controller]")]
[EnableCors("AllowAll")]
public class MyController : ControllerBase
{
    // 控制器的方法...
}

"CorsSettings": {
  "Development": {
    "PolicyName": "AllowAll"
  },
  "Production": {
    "PolicyName": "AllowSpecificOrigins",
    "Origins": "https://example.com"
  }
}

public void ConfigureServices(IServiceCollection services)
{
    // 其他服务配置...

    var corsSettings = Configuration.GetSection("CorsSettings").Get<CorsSettings>();
    var policyName = corsSettings[env.EnvironmentName]?.PolicyName ?? "AllowAll";
    
    services.AddCors(options =>
    {
        options.AddPolicy("AllowAll", builder =>
        {
            builder.AllowAnyOrigin()
                   .AllowAnyMethod()
                   .AllowAnyHeader();
        });

        options.AddPolicy("AllowSpecificOrigins", builder =>
        {
            builder.WithOrigins(corsSettings[env.EnvironmentName]?.Origins)
                   .AllowAnyMethod()
                   .AllowAnyHeader();
        });
    });

    // 其他服务配置...
}

[ApiController]
[Route("api/[controller]")]
[EnableCors]
public class MyController : ControllerBase
{
    // 控制器的方法...
}