SharuPoNemnoguв заголовках есть параметр Access-Control-Allow-Origin ?
Я сделал вывод в сервисе, вот что приходит и уходит в ФФ и Хроме
Вот какие запросы приходят и уходят в ФФ и в Хром, сделал вывод в WCF в AfterReceived и BeforeReply
Firefox
-- FF request
*httpRequest.Method*:OPTIONS
*httpRequest.Headers*:Origin:
http://localhost
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3
Host: localhost:8082
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/
40.0
— FF Response
*CORS* Method == OPTIONS
*CORS* Headers are modified
*Reply.Headers*:
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: DAV, content-length, Allow
Access-Control-Allow-Headers: Authorization, svccontext, Origin, Accept, Over
write, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-R
ange, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Ca
che-Control, Location, Lock-Token
Access-Control-Allow-Methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE
, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH,
PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
Access-Control-Max-Age: 1728000
*--------------------*
Chrome
-- Chrome request
*httpRequest.Method*:OPTIONS
*httpRequest.Headers*:Access-Control-Request-Method: GET
Origin:
http://localhost
Access-Control-Request-Headers: accept, authorization
Connection: keep-alive
Accept: */*
Accept-Encoding: gzip, deflate, sdch
Accept-Language: en-US,en;q=0.8,de;q=0.6,ru;q=0.4,uk;q=0.2
Host: localhost:8082
Referer:
http://localhost/RestSamples/Samples/login.html
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/44.0.2403.155 Safari/537.36
-- Chrome response
*CORS* Method == OPTIONS
*CORS* Headers are modified
*Reply.Headers*:
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: DAV, content-length, Allow
Access-Control-Allow-Headers: Authorization, svccontext, Origin, Accept, Over
write, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-R
ange, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Ca
che-Control, Location, Lock-Token
Access-Control-Allow-Methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE
, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH,
PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
Access-Control-Max-Age: 1728000
