ASP.NET Web API部署后POST请求405方法不允许问题求助

使用ASP.NET Web API开发后端接口，本地运行所有接口正常，但前端部署到Vercel后，通过域名www.quettacafe.com调用时，GET请求正常，POST请求返回405（Method Not Allowed）错误，后端服务部署在本地系统中。

前端调用代码 #

const onCreateCustomer = async (event) => {
    event.preventDefault();

    //setLoading(true);
    setError(null);

    const formData = new FormData();
    formData.append("name", customer.c_name);
    formData.append("email", customer.c_email);
    formData.append("password", customer.c_password);
    formData.append("phone", customer.phoneno);
    formData.append("address", customer.address);
    formData.append("disease", customer.disease);

    if (lat !== null && lon !== null) {
      formData.append("latitude", lat);
      formData.append("longitude", lon);
    }

    try {
      const response = await fetch(
        `https://www.quettacafe.com/FoodDeliverySystems/api/customer/signup`,
        {
          method: "POST",
          body: formData,
          headers: {
            Accept: "*/*",
          },
        }
      );

      if (!response.ok) {
        const errorData = await response.json();
        throw new Error(
          errorData.message || `HTTP error! Status: ${response.status}`
        );
      }

      const data = await response.json();
      console.log("Signup response:", data);

      const latestCustomer = await fetchLatestCustomer(lat, lon);

      navigate("/LoginCustomer");
    } catch (error) {
      console.error("Signup error:", error);
      setError(error.message);
    } finally {
      setLoading(false);
    }
  };

后端C#接口代码 #

[HttpPost]
public HttpResponseMessage Signup()
{
    try
    {
        var httpRequest = HttpContext.Current.Request;

        // Retrieve form data
        var name = httpRequest.Form["name"];
        var email = httpRequest.Form["email"];
        var password = httpRequest.Form["password"];
        var phone = httpRequest.Form["phone"];
        var address = httpRequest.Form["address"];
        var latitude = httpRequest.Form["latitude"];
        var longitude = httpRequest.Form["longitude"];
        var disease = httpRequest.Form["disease"];

        var account = db.customer.Where(s => s.email == email).FirstOrDefault();
        if (account != null)
        {
            return Request.CreateResponse(HttpStatusCode.OK, "Already exists");
        }
        else
        {
            customer cus = new customer()
            {
                name = name,
                email = email,
                password = password,
                phone = phone,
                address = address,
                disease=disease
            };
            db.customer.Add(cus);
            db.SaveChanges();
            return Request.CreateResponse(HttpStatusCode.Created, cus);
        }
    }
    catch (Exception ex)
    {
        return Request.CreateResponse(HttpStatusCode.InternalServerError, ex.Message);
    }
}

CORS配置 #

[EnableCors(origins: "*", headers: "*", methods: "*")]    

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web.Http;
using System.Web.Http.Cors;

namespace Fooddeliverysystems
{
    public static class WebApiConfig
    {
        public static void Register(HttpConfiguration config)
        {
            // Web API configuration and services

            // Web API routes
            var cors = new EnableCorsAttribute("*", "*", "*");
            config.EnableCors(cors);
            config.MapHttpAttributeRoutes();

            config.Routes.MapHttpRoute(
                name: "DefaultApi",
                routeTemplate: "api/{controller}/{action}/{id}",
                defaults: new { id = RouteParameter.Optional }
            );
        }
    }
}

路由配置 #

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Routing;

namespace Fooddeliverysystems
{
    public class RouteConfig
    {
        public static void RegisterRoutes(RouteCollection routes)
        {
            routes.IgnoreRoute("{resource}.axd/{*pathInfo}");

            routes.MapRoute(
                name: "Default",
                url: "{controller}/{action}/{id}",
                defaults: new { controller = "Home", action = "Index", id = UrlParameter.Optional }
            );
        }
    }
}

已尝试修改前后端请求头、切换到本地localhost地址（此时正常），但通过www.quettacafe.com域名调用时POST请求仍报错405，GET请求正常。

针对POST请求返回405的问题，结合本地后端+Vercel前端+域名代理的场景，排查及解决方向如下：

1. 域名代理的请求方法限制 #

www.quettacafe.com作为代理转发请求到本地后端，大概率存在代理规则限制POST方法：

• 检查域名服务商的反向代理配置：确保规则允许POST请求传递到后端，未设置仅允许GET的方法白名单。
• 若使用Cloudflare：查看缓存规则/页面规则，确认未对API路径设置缓存（缓存会拦截POST）；同时在SSL/TLS设置中切换为“完全”或“严格”模式，避免“灵活”模式导致的请求转换异常。

2. 本地IIS的请求方法拦截 #

若后端部署在IIS上，默认可能禁用POST或存在重写规则拦截：

• 打开IIS管理器 → 目标站点 → 请求筛选 → HTTP方法，确认POST在允许列表中。
• 检查URL重写规则：确保没有将POST请求错误转换为GET或直接阻止。

3. CORS预检请求（OPTIONS）未正确响应 #

带FormData的POST会触发OPTIONS预检请求，若后端未正确响应，浏览器会拦截后续POST：

• 在WebApiConfig中添加自定义OPTIONS请求处理器：

  config.MessageHandlers.Add(new OptionsMessageHandler());
  

  实现处理器类：

  public class OptionsMessageHandler : DelegatingHandler
  {
      protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)
      {
          if (request.Method == HttpMethod.Options)
          {
              var response = new HttpResponseMessage(HttpStatusCode.OK);
              response.Headers.Add("Access-Control-Allow-Origin", "*");
              response.Headers.Add("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
              response.Headers.Add("Access-Control-Allow-Headers", "Content-Type, Accept");
              return Task.FromResult(response);
          }
          return base.SendAsync(request, cancellationToken);
      }
  }
  

4. MVC与WebAPI路由冲突 #

项目同时配置MVC和WebAPI路由，可能导致POST请求被MVC路由捕获：

• 在Global.asax中先注册WebAPI路由，再注册MVC路由：

  WebApiConfig.Register(GlobalConfiguration.Configuration);
  RouteConfig.RegisterRoutes(RouteTable.Routes);
  

• 给WebAPI控制器添加路由前缀特性，明确路由范围：

  [RoutePrefix("api/customer")]
  [EnableCors(origins: "*", headers: "*", methods: "*")]
  public class CustomerController : ApiController
  {
      [HttpPost]
      [Route("signup")]
      public HttpResponseMessage Signup()
      {
          // 原有代码
      }
  }
  

5. 前端跨域凭证设置 #

调整前端fetch的凭证配置，避免跨域请求被拦截：

const response = await fetch(
  `https://www.quettacafe.com/FoodDeliverySystems/api/customer/signup`,
  {
    method: "POST",
    body: formData,
    headers: {
      Accept: "*/*",
    },
    credentials: "omit" // 或"include"，根据是否需要携带Cookie调整
  }
);

内容的提问来源于stack exchange，提问作者Muhammad Yahya