How can I configure CORS in ASP.NET Core for multiple domains?

How can I configure CORS in ASP.NET Core for multiple domains?

You can configure CORS in ASP.NET Core by using the AddCors method in the Startup.cs file. You can specify multiple allowed origins.

Can you show me an example of how to set that up?

Sure! In your ConfigureServices method, you can do something like this:

services.AddCors(options =>
{
    options.AddPolicy("MyPolicy",
        builder =>
        {
            builder.WithOrigins("https://example1.com", "https://example2.com")
                   .AllowAnyHeader()
                   .AllowAnyMethod();
        });
});

What if I want to allow credentials as well?

You can add .AllowCredentials() to your CORS policy like this:

builder.WithOrigins("https://example1.com", "https://example2.com")
       .AllowAnyHeader()
       .AllowAnyMethod()
       .AllowCredentials();

Is there a way to restrict specific HTTP methods?

Yes, you can specify allowed methods using .WithMethods("GET", "POST") in your CORS policy.