jQuery.ajax 跨域请求webapi设置headers的解决方案

<system.webServer><httpProtocol><!--跨域配置开始--><customHeaders><add name="Access-Control-Allow-Origin" value="*" /><!--支持全域名访问，不安全，部署后需要固定限制为客户端网址--><add name="Access-Control-Allow-Methods" value="GET, POST, PUT, DELETE, OPTIONS" /><!--支持的http 动作--><add name="Access-Control-Allow-Headers" value="Content-Type,X-Requested-With,token" /><!--响应头 请按照自己需求添加 这里新加了token这个headers--><add name="Access-Control-Request-Methods" value="GET, POST, PUT, DELETE, OPTIONS" /><!--允许请求的http 动作--></customHeaders><!--跨域配置结束--></httpProtocol>

/// <summary>/// 权限拦截器/// </summary>public class ApiAuthorizeAttribute : AuthorizeAttribute{public override void OnAuthorization(HttpActionContext actionContext){if (actionContext.Request.Method == HttpMethod.Options){actionContext.Response = actionContext.Request.CreateResponse(HttpStatusCode.Accepted);return;}}} 

$("#btnSumit").click(function () {var Ticket = $.cookie("token");var model = {id: 1};$.ajax({type: "POST",url: "http://localhost:65312/api/products/FindProductById",data: JSON.stringify(model),contentType: "application/json; charset=utf-8",dataType: "json",beforeSend: function (xhr) {// //发送ajax请求之前向http的head里面加入验证信息xhr.setRequestHeader("token", Ticket); // 请求发起前在头部附加token},success: function (data, status) {if (data.statuscode == "401") {alert(data.msg);}else{alert(JSON.stringify(data))}},//error: function (XMLHttpRequest, textStatus, errorThrown) {// alert(XMLHttpRequest.status);// alert(XMLHttpRequest.readyState);// alert(textStatus);//},complete: function () {}});});