Enabling CORS in ASP.NET Core API for React Native app

Question

I have an ASP.NET Core 3.1 API backend which is already configured to allow CORS for my web app -- see below.

I'm now building a mobile app in React Native. How do I add the specific origin for my React Native app so that my API accepts requests from my mobile app?

I don't want to allow everyone and any app. I do want to keep it as secure as possible and specify my web and mobile apps.

Here's what's currently in my Startup.cs:

services.AddCors(action =>
       action.AddPolicy("AllowSpecificOrigin", builder =>
          builder
          .AllowAnyMethod()
          .AllowAnyHeader()
          .WithOrigins("https://mywebapp.com", "http://localhost:50920", "https://myaccount.service.signalr.net", "http://localhost:3000")
          .AllowCredentials()));

Jakub Kozera · Accepted Answer · 2020-05-12 17:04:43Z

1

CORS only applies to AJAX requests from browsers. By adding and using CORS in your application all it does is just adding a Access-Control-Allow-Origin: header to the response. Then the browser can lookup the value of that header and either block the AJAX or allow.

So in terms of other clients than web browsers CORS has nothing to do for accessing your API

answered May 12, 2020 at 17:04

Jakub Kozera

3,5032 gold badges15 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Sercan Over a year ago

So don't we need to add cors code into our Startup.cs, if we just have react native mobile app as frontend?

Jakub Kozera Over a year ago

no, if it is a native mobile app, there is no such nee

Collectives™ on Stack Overflow

Enabling CORS in ASP.NET Core API for React Native app

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related