<system.webServer>
<httpProtocol>
<!--跨域配置開(kāi)始-->
<customHeaders>
<add name="Access-Control-Allow-Origin" value="*" /><!--支持全域名訪問(wèn)，不安全，部署后需要固定限制為客戶端網(wǎng)址-->
<add name="Access-Control-Allow-Methods" value="GET, POST, PUT, DELETE, OPTIONS" /><!--支持的http 動(dòng)作-->
<add name="Access-Control-Allow-Headers" value="Content-Type,X-Requested-With,token" /><!--響應(yīng)頭 請(qǐng)按照自己需求添加 這里新加了token這個(gè)headers-->
<add name="Access-Control-Request-Methods" value="GET, POST, PUT, DELETE, OPTIONS" /><!--允許請(qǐng)求的http 動(dòng)作-->
</customHeaders>
<!--跨域配置結(jié)束-->
</httpProtocol>

/// <summary>
/// 權(quán)限攔截器
/// </summary>
public class ApiAuthorizeAttribute : AuthorizeAttribute
{
public override void OnAuthorization(HttpActionContext actionContext)
{
if (actionContext.Request.Method == HttpMethod.Options)
{
actionContext.Response = actionContext.Request.CreateResponse(HttpStatusCode.Accepted);
return;
}
}
} 

$("#btnSumit").click(function () {
var Ticket = $.cookie("token");
var model = {
id: 1
};
$.ajax({
type: "POST",
url: "http://localhost:65312/api/products/FindProductById",
data: JSON.stringify(model),
contentType: "application/json; charset=utf-8",
dataType: "json",
beforeSend: function (xhr) {
// //發(fā)送ajax請(qǐng)求之前向http的head里面加入驗(yàn)證信息
xhr.setRequestHeader("token", Ticket); // 請(qǐng)求發(fā)起前在頭部附加token
},
success: function (data, status) {
if (data.statuscode == "401") {
alert(data.msg);
}
else
{
alert(JSON.stringify(data))
}
},
//error: function (XMLHttpRequest, textStatus, errorThrown) {
// alert(XMLHttpRequest.status);
// alert(XMLHttpRequest.readyState);
// alert(textStatus);
//},
complete: function () {
}
});
});