AddAllowedOrigins

Registers a named CORS policy from the AllowedOrigins configuration section. The policy allows the configured origins, any request header, any HTTP method, and credentials.

Use this method when allowed browser origins should be controlled from configuration instead of hard-coded in startup code. Because the policy allows credentials, configure explicit origins and avoid wildcard-style values.

Usage

WARNING

Requires an AllowedOrigins section in application configuration, usually from appsettings.json.

using AlmightyShogun.AspNet.Utils;

builder.Services.AddAllowedOrigins("DefaultCors", builder.Configuration);

Parameters

name: string
Name of the CORS policy to register.

configuration: IConfiguration
Application configuration containing the AllowedOrigins section.

Returns

The IServiceCollection instance with the named CORS policy configured.

Type signature

public IServiceCollection AddAllowedOrigins(
    string name,
    IConfiguration configuration
);