ajax上传 webapi,让webapi只接受ajax请求

AjaxOnly继承ActionFilterAttribute，代码如下

public class AjaxOnlyAttribute : ActionFilterAttribute

{

public override void OnActionExecuting(HttpActionContext filterContext)

{

var request = filterContext.Request;

var headers = request.Headers;

if (!headers.Contains("X-Requested-With")

|| headers.GetValues("X-Requested-With").FirstOrDefault() != "XMLHttpRequest")

{

throw new InvalidOperationException("This operation can only be accessed via Ajax requests");

}

else {

base.OnActionExecuting(filterContext);

}

}

}

其中 if (!headers.Contains("X-Requested-With")

|| headers.GetValues("X-Requested-With").FirstOrDefault() != "XMLHttpRequest") 就是判断它是不是ajax请求，如果true则说明不是

如果是controller的话可以用HttpContext.Request.IsAjaxRequest()来判断，webapi的actionContext中不支持IsAjaxRequest