I came across the same issue and found a blog post on it. According to this blog post if you use the release candidate it should fix the error 

    Install-Package Microsoft.AspNet.WebApi -IncludePrerelease

From here: http://wp.sjkp.dk/webapi-and-cors-enabled-rest-services/

This worked for me :D

In other words, it was fixed in `5.1.0-rc1` release.

I had this problem using NET 4.6.1 and after may hours of research removing this from web.config finally fixed the issue:

    &lt;runtime&gt;
    &lt;dependentAssembly&gt;
         &lt;assemblyIdentity name=&quot;System.Net.Http&quot; publicKeyToken=&quot;b03f5f7f11d50a3a&quot; culture=&quot;neutral&quot; /&gt;
         &lt;bindingRedirect oldVersion=&quot;0.0.0.0-4.1.1.0&quot; newVersion=&quot;4.1.1.0&quot; /&gt;
       &lt;/dependentAssembly&gt;
    &lt;/runtime&gt;




I had the same problem. Definitely &quot;Cors&quot; doesn&#39;t work to me!

What I did to solve my problem with Cross Domain in WebApi it was remove Cors and change my web.config

If you insert the following lines inside your web.config, you&#39;ll have an WebApi with Cross Domain enabled.

` &lt;system.webServer&gt;
    &lt;httpProtocol&gt;
      &lt;customHeaders&gt;
        &lt;add name=&quot;Access-Control-Allow-Origin&quot; value=&quot;*&quot; /&gt;
        &lt;add name=&quot;Access-Control-Allow-Methods&quot; value=&quot;GET, POST, OPTIONS, PUT, DELETE&quot; /&gt;
      &lt;/customHeaders&gt;
    &lt;/httpProtocol&gt;
  &lt;/system.webServer&gt;
`



Description of the problem: with iOS 7 in grouped `UITableView` there is a gap between the top of the table view and the first cell.

The strange part is that when I load the content for the first time the table appears to be ok (first image), but when I scroll down a space appears between top and first cell (second image):

![enter image description here][1] ![enter image description here][2]

With style plain this behavior does&#39;t occur but unfortunately I need to use the grouped table view style.

Any ideas about?


  [1]: http://i.stack.imgur.com/GOR3u.png
  [2]: http://i.stack.imgur.com/y1G4q.png

iOS 7 UITableView: How to remove space between navigation bar and first cell

Can anyone help me to find out what can be the issue with this program.
In the `onCreate()` method the `findViewById()` returns null for all ids and this causes a null pointer exception later. I can not figure out why the `findViewById()` can not find the view. Any suggestions?

This is the main code:

    public class MainActivity extends Activity {
    
    	ViewPager pager;
    	MyPagerAdapter adapter;
    	LinearLayout layout1, layout2, layout3;
    	
    	@Override
    	protected void onCreate(Bundle savedInstanceState) {
    		super.onCreate(savedInstanceState);
    		setContentView(R.layout.activity_main);
    		
            layout1 = (LinearLayout) findViewById(R.id.first_View);
    		layout2 = (LinearLayout) findViewById(R.id.second_View);
    		layout3 = (LinearLayout) findViewById(R.id.third_View);
    		
    		adapter = new MyPagerAdapter();
            pager = (ViewPager) findViewById(R.id.main_pager);
            pager.setAdapter(adapter);
    	}
    	
    	private class MyPagerAdapter extends PagerAdapter
    	{
    
    		@Override
    		public int getCount() { 
    			return 3;
    		}
    
    		@Override
            public Object instantiateItem(ViewGroup collection, int position) {
                    
    			LinearLayout l = null;
    			
    			if (position == 0 )
    			{
    				l = layout1;
    			}
    			if (position == 1)
    			{
    				l = layout2;
    			}
    				
    			if (position == 2)
    			{
    				l = layout3;
    			}
    				collection.addView(l, position);
    				return l;
            }
    		
    		@Override
    		public boolean isViewFromObject(View view, Object object) {
    			return (view==object);
    		}
    		
    		 @Override
             public void destroyItem(ViewGroup collection, int position, Object view) {
                     collection.removeView((View) view);
             }
    	}
    }

And the related XML files:

activity_main layout: 

    &lt;?xml version=&quot;1.0&quot; encoding=&quot;utf-8&quot;?&gt;
    &lt;LinearLayout xmlns:android=&quot;http://schemas.android.com/apk/res/android&quot;
				    android:orientation=&quot;vertical&quot;
				    android:layout_width=&quot;fill_parent&quot;
				    android:layout_height=&quot;fill_parent&quot;
				    android:background=&quot;#a4c639&quot;&gt;
		
		
		&lt;android.support.v4.view.ViewPager
    						android:layout_width=&quot;match_parent&quot; 
    						android:layout_height=&quot;match_parent&quot; 
    						android:id=&quot;@+id/main_pager&quot;/&gt;
    &lt;/LinearLayout&gt;

activity_first layout:

    &lt;?xml version=&quot;1.0&quot; encoding=&quot;utf-8&quot;?&gt;
    &lt;LinearLayout xmlns:android=&quot;http://schemas.android.com/apk/res/android&quot;
    android:layout_width=&quot;match_parent&quot;
    android:layout_height=&quot;match_parent&quot;
    android:id=&quot;@+id/first_View&quot;&gt;

    &lt;TextView
        android:layout_width=&quot;wrap_content&quot;
        android:layout_height=&quot;wrap_content&quot;
        android:text=&quot;@string/hello_world&quot; /&gt;

    &lt;Button
        android:id=&quot;@+id/button1&quot;
        style=&quot;?android:attr/buttonStyleSmall&quot;
        android:layout_width=&quot;wrap_content&quot;
        android:layout_height=&quot;wrap_content&quot;
        android:text=&quot;Button&quot; /&gt;

    &lt;/LinearLayout&gt;

activity_second layout:

     &lt;?xml version=&quot;1.0&quot; encoding=&quot;utf-8&quot;?&gt;
     &lt;LinearLayout xmlns:android=&quot;http://schemas.android.com/apk/res/android&quot;
    
    android:layout_width=&quot;match_parent&quot;
    android:layout_height=&quot;match_parent&quot;
    android:id=&quot;@+id/second_View&quot;&gt;

    &lt;TextView
        android:layout_width=&quot;wrap_content&quot;
        android:layout_height=&quot;wrap_content&quot;
        android:text=&quot;@string/hello_world&quot; /&gt;

    &lt;/LinearLayout&gt;


And the activity_third layout: 

    &lt;?xml version=&quot;1.0&quot; encoding=&quot;utf-8&quot;?&gt;
    &lt;LinearLayout xmlns:android=&quot;http://schemas.android.com/apk/res/android&quot;
    android:layout_width=&quot;match_parent&quot;
    android:layout_height=&quot;match_parent&quot;
    android:id=&quot;@+id/third_View&quot;&gt;

    &lt;TextView
        android:layout_width=&quot;wrap_content&quot;
        android:layout_height=&quot;wrap_content&quot;
        android:text=&quot;@string/hello_world&quot; /&gt;

    &lt;/LinearLayout&gt;



Null pointer Exception - findViewById()

I have added a new Web API project. I install Cors

    PM&gt; Install-Package Microsoft.AspNet.WebApi.Cors -Pre

Then when I run my project, I get this error:

&gt; The type initializer for &#39;System.Web.Http.GlobalConfiguration&#39; threw
&gt; an exception.

This is my inner exception:

   
&gt; {&quot;Attempt by method &#39;System.Web.Http.GlobalConfiguration..cctor()&#39; to
&gt; access field
&gt; &#39;System.Web.Http.GlobalConfiguration.CS$&lt;&gt;9__CachedAnonymousMethodDelegate2&#39;
&gt; failed.&quot;}



The type initializer for &#39;System.Web.Http.GlobalConfiguration&#39; threw an exception

I have added a new Web API project. I install Cors
<pre><code class="hljs language-shell">PM> Install-Package Microsoft.AspNet.WebApi.Cors -Pre
</code></pre>
Then when I run my project, I get this error:
> The type initializer for 'System.Web.Http.GlobalConfiguration' threw
> an exception.
This is my inner exception:
> {"Attempt by method 'System.Web.Http.GlobalConfiguration..cctor()' to
> access field
> 'System.Web.Http.GlobalConfiguration.CS$&#x3C;>9__CachedAnonymousMethodDelegate2'
> failed."}

I&#39;m trying to get a post request to work with the web api. Following is my api controller.

    public class WebsController : ApiController
    {
        [HttpPost]
        public void PostOne(string id)
        {
        }

        [HttpPost]
        public void PostTwo(Temp id)
        {
        }
    }

I have altered the webapi route to take the action into account. the Temp model look something like this.

    public class Temp
    {
        public string Id { get; set; }
    }

my view look something like this

    @using (Ajax.BeginForm(new AjaxOptions
    {
        Url = &quot;/api/webs/postone&quot;,
        HttpMethod = &quot;post&quot;
    }))
    {
        &lt;input name=&quot;id&quot; id=&quot;id&quot; value=&quot;2&quot; /&gt;
        &lt;input type=&quot;submit&quot; value=&quot;submit&quot; /&gt;
    }

the above code does not work at all with the postone unless I put the [FromBody] attribute in front of the parameter like this.

    [HttpPost]
    public void PostOne([FromBody]string id)
    {
    }

then it hits the action, but the id is still null. It doesn&#39;t get populated with the value in the textbox.

But, if I change the `Url` of the `Ajax.BeginForm` to `posttwo` which take the model `Temp`, it works nicely and the `Id` field gets the proper value in the textbox. 

can anyone please explain me the reason for this to happen and how I can post a simple value to a web api action? I mean, why can it bind a complex type but not a simple type.

Simple post to Web Api

Is there **any** scenario where writing method like this:

    public async Task&lt;SomeResult&gt; DoSomethingAsync()
    {
        // Some synchronous code might or might not be here... //
        return await DoAnotherThingAsync();
    }

instead of this:

    public Task&lt;SomeResult&gt; DoSomethingAsync()
    {
        // Some synchronous code might or might not be here... //
        return DoAnotherThingAsync();
    }

would make sense?

**Why use `return await` construct when you can directly return `Task&lt;T&gt;` from the inner `DoAnotherThingAsync()` invocation?**

I see code with `return await` in so many places, I think I might have missed something. But as far as I understand, not using async/await keywords in this case and directly returning the Task would be functionally equivalent. Why add additional overhead of additional `await` layer?

What is the purpose of &quot;return await&quot; in C#?

What are the differences between using Parallel.ForEach or Task.Run() to start a set of tasks asynchronously?

Version 1:

    List&lt;string&gt; strings = new List&lt;string&gt; { &quot;s1&quot;, &quot;s2&quot;, &quot;s3&quot; };
    Parallel.ForEach(strings, s =&gt;
    {
        DoSomething(s);
    });

Version 2:

    List&lt;string&gt; strings = new List&lt;string&gt; { &quot;s1&quot;, &quot;s2&quot;, &quot;s3&quot; };
    List&lt;Task&gt; Tasks = new List&lt;Task&gt;();
    foreach (var s in strings)
    {
        Tasks.Add(Task.Run(() =&gt; DoSomething(s)));
    }
    await Task.WhenAll(Tasks);




Parallel.ForEach vs Task.Run and Task.WhenAll

I have below `ObservableCollection&lt;string&gt;`. I need to **sort** this alphabetically.

    private ObservableCollection&lt;string&gt; _animals = new ObservableCollection&lt;string&gt;
    {
        &quot;Cat&quot;, &quot;Dog&quot;, &quot;Bear&quot;, &quot;Lion&quot;, &quot;Mouse&quot;,
        &quot;Horse&quot;, &quot;Rat&quot;, &quot;Elephant&quot;, &quot;Kangaroo&quot;, &quot;Lizard&quot;, 
        &quot;Snake&quot;, &quot;Frog&quot;, &quot;Fish&quot;, &quot;Butterfly&quot;, &quot;Human&quot;, 
        &quot;Cow&quot;, &quot;Bumble Bee&quot;
    };

I tried `_animals.OrderByDescending`. But I don&#39;t know how to use it correctly.

    _animals.OrderByDescending(a =&gt; a.&lt;what_is_here_?&gt;);

How can I do this?

Sort ObservableCollection&lt;string&gt; through C#

I have the following test code. I always get the &quot;Task was cancelled&quot; error after looping 316934 or 361992 times.

If I am not wrong, there are two possible reasons why the task was cancelled a) HttpClient got timeout or b) too many tasks in queue and some tasks got time-out. 

I couldn&#39;t find the documentation about the limitation in queueing the tasks. And I tried creating more than 500K tasks and no time-out. I guess the reason &quot;b&quot; might not be right. 

Q1. Is there any other reason that I missed out? 

Q2. If it&#39;s because HttpClient timeout, how can I get the exact exception message instead of &quot;TaskCancellation&quot; exception. 

Q3. What would be the best way to fix it? Should I introduce the throttler? 

Thanks!


    var _httpClient = new HttpClient();
    _httpClient.DefaultRequestHeaders.TryAddWithoutValidation(&quot;Accept&quot;, &quot;text/html,application/xhtml+xml,application/xml&quot;);
    _httpClient.DefaultRequestHeaders.TryAddWithoutValidation(&quot;Accept-Encoding&quot;, &quot;gzip, deflate&quot;);
    _httpClient.DefaultRequestHeaders.TryAddWithoutValidation(&quot;User-Agent&quot;, &quot;Mozilla/5.0 (Windows NT 6.2; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0&quot;);
    _httpClient.DefaultRequestHeaders.TryAddWithoutValidation(&quot;Accept-Charset&quot;, &quot;ISO-8859-1&quot;);
    
    int[] intArray = Enumerable.Range(0, 600000).ToArray();
    
    var results = intArray                
        .Select(async t =&gt; {
    
            using (HttpRequestMessage requestMessage = new HttpRequestMessage(HttpMethod.Get, &quot;http://www.google.com&quot;)) {
                log.Info(t);
    
                try {
    
                    var response = await _httpClient.SendAsync(requestMessage);
                    var responseContent = await response.Content.ReadAsStringAsync();
    
                    return responseContent;
                }
                catch (Exception ex) {
                    log.ErrorException(string.Format(&quot;SoeHtike {0}&quot;, Task.CurrentId), ex);
                }
                return null;
            }
        });
    
    Task.WaitAll(results.ToArray());
    
    Console.ReadLine();

Here is the step to replicate the issue. 

1. Create a Console Project in VS 2012. 

2. Please copy and paste my code in Main. 

3. Put the breakpoint at this line &quot; log.ErrorException(string.Format(&quot;SoeHtike
 {0}&quot;,
Task.CurrentId),
 ex);&quot;

Run the program in debug mode. Wait for a few minutes. (maybe 5 minutes? )  I just tested my code and I got the exception after 3 mins. If you have fiddler, you can monitor the requests so that you know the program is still running or not. 

Feel free to let me know if you can&#39;t replicate the issue. 

HttpClient - task was cancelled - How to get the exact error message?

I have been going through the error logs of a development project and found the following error (name changed to protect the &lt;strike&gt;guilty&lt;/strike&gt; innocent)-

&gt; The provided anti-forgery token was meant for user &quot;&quot;, but the current
&gt; user is &quot;admin&quot;.

This was not an especially difficult issue to reproduce-

1. Open the application at the login page
2. Open a second window or tab in the **same browser** on the **same computer** to the login page before logging in
3. Login in the first window (or indeed second, the order doesn&#39;t matter)
4. Attempt to login in the remaining login window

The stack trace is-

&gt; System.Web.Mvc.HttpAntiForgeryException (0x80004005): The provided
&gt; anti-forgery token was meant for user &quot;&quot;, but the current user is
&gt; &quot;admin&quot;.    at
&gt; System.Web.Helpers.AntiXsrf.TokenValidator.ValidateTokens(HttpContextBase
&gt; httpContext, IIdentity identity, AntiForgeryToken sessionToken,
&gt; AntiForgeryToken fieldToken)    at
&gt; System.Web.Helpers.AntiXsrf.AntiForgeryWorker.Validate(HttpContextBase
&gt; httpContext)    at System.Web.Helpers.AntiForgery.Validate()    at
&gt; System.Web.Mvc.ValidateAntiForgeryTokenAttribute.OnAuthorization(AuthorizationContext
&gt; filterContext)    at
&gt; System.Web.Mvc.ControllerActionInvoker.InvokeAuthorizationFilters(ControllerContext
&gt; controllerContext, IList`1 filters, ActionDescriptor actionDescriptor)
&gt; at
&gt; System.Web.Mvc.Async.AsyncControllerActionInvoker.&lt;&gt;c__DisplayClass25.&lt;BeginInvokeAction&gt;b__1e(AsyncCallback
&gt; asyncCallback, Object asyncState)

The login method signature is-

    [HttpPost]
    [AllowAnonymous]
    [ValidateAntiForgeryToken]
    public ActionResult Login(LoginModel model, string returnUrl)
    {
    ...
    }

This is exactly the same as the signature for the method in a internet &quot;ASP.NET MVC 4 Web Application&quot; templated project, which indicates that Microsoft either felt the ValidateAntiForgeryToken was necessary/best practice, or simply added the attribute here because it was used everywhere else.

Obviously there is nothing I can do to handle the problem *within* this method as it isn&#39;t reached, the ValidateAntiForgeryToken is a pre-request filter and it is blocking the request before it reaches the controller.

I could check if the user is authenticated via Ajax before submitting the form and attempt to redirect to them if so, or simply remove the attribute.

The question is this - I understand that the token is design to prevent requests from another site (CSRF) when the user *is already authenticated against your site* so on that basis **is it an issue to remove it from a form which by definition will be used by unauthenticated users**? 

Presumably the attribute in this instance is designed to mitigate malicious actors providing fake login forms for your application (although by the time the exception is thrown presumably the user has already entered his or her details which will have been recorded - but it might alert them something is wrong). Otherwise submitting incorrect credentials to the form from an external site will result in exactly the same result as on the site itself surely? I am not relying on client validation/sanitation to clean up potentially unsafe input.

Have other devs come across this issue (or do we have unusually creative users) and if so how have you resolved/mitigated it?

**Update:** This issue still exists in MVC5, entirely intentionally, now with the error message &quot;The provided anti-forgery token was meant for a different claims-based user than the current user.&quot; when using default template and Identity providers. There is a relevant question and interesting answer from Microsoft Developer Evangelist and Troy&#39;s fellow PluralSight author Adam Tuliper at https://stackoverflow.com/questions/9433083/anti-forgery-token-on-login-page which recommends simply removing the token.

Login request validation token issue

I have an ASP.Net MVC 4 app and am using the Url.Action helper like this: `@Url.Action(&quot;Information&quot;, &quot;Admin&quot;)`

This page is used for both adding a new and edit an admin profile. The URLs are as follows:

     Adding a new:       http://localhost:4935/Admin/Information
     Editing Existing:   http://localhost:4935/Admin/Information/5 &lt;==Admin ID

When I&#39;m in the `Editing Existing` section of the site and decide that I would like to add a new admin I click on the following link:  

     &lt;a href=&quot;@Url.Action(&quot;Information&quot;, &quot;Admin&quot;)&quot;&gt;Add an Admin&lt;/a&gt;

The problem however that the above link is actually going to `http://localhost:4935/Admin/Information/5`. This only happens when I&#39;m in that page editing an existing admin. Anywhere else on the site it links correctly to `http://localhost:4935/Admin/Information`

Has anyone else seen this?

**UPDATE:** 

RouteConfig:

            routes.MapRoute(
                name: &quot;Default&quot;,
                url: &quot;{controller}/{action}/{id}&quot;,
                defaults: new { controller = &quot;Home&quot;, action = &quot;Index&quot;, id = UrlParameter.Optional }
            );    

URL.Action() including route values

Which Authorize Attribute ?  
**System.Web.Http.Authorize  
System.Web.Mvc.Authorize**

    using System.Web.Mvc      // or
    using System.Web.Http  

A typical controller  
  
        [Authorize]
        public class SomeController : Controller

We have controllers Annotated with `[Authorize]`
I just noticed that due to **using namespaces** the annotations technically refer to different attribute classes.

The project contains MVC controllers and  WEBAPI controllers.

Which one should I use and why ?
What issues might we have if I dont fix this ?




System.Web.Http.Authorize versus System.Web.Mvc.Authorize

Here&#39;s the call to the `PUT` method on my Web API - the third line in the method (I am calling the Web API from an ASP.NET MVC front end):

![enter image description here][1]

`client.BaseAddress` is `http://localhost/CallCOPAPI/`.

Here&#39;s `contactUri`:

![enter image description here][2]

Here&#39;s `contactUri.PathAndQuery`:

![enter image description here][3]

And finally, here&#39;s my 405 response:

![enter image description here][4]

Here&#39;s the WebApi.config in my Web API project:

            public static void Register(HttpConfiguration config)
            {
                config.Routes.MapHttpRoute(
                    name: &quot;DefaultApi&quot;,
                    routeTemplate: &quot;api/{controller}/{id}&quot;,
                    defaults: new { id = RouteParameter.Optional }
                );
    
                config.Routes.MapHttpRoute(
                    name: &quot;DefaultApiGet&quot;,
                    routeTemplate: &quot;api/{controller}/{action}/{regionId}&quot;,
                    defaults: new { action = &quot;Get&quot; },
                    constraints: new { httpMethod = new HttpMethodConstraint(&quot;GET&quot;) });
    
                var json = config.Formatters.JsonFormatter;
                json.SerializerSettings.PreserveReferencesHandling = Newtonsoft.Json.PreserveReferencesHandling.Objects;
                config.Formatters.Remove(config.Formatters.XmlFormatter);

I&#39;ve tried stripping down the path that gets passed into `PutAsJsonAsync` to `string.Format(&quot;/api/department/{0}&quot;, department.Id)` and `string.Format(&quot;http://localhost/CallCOPAPI/api/department/{0}&quot;, department.Id)` with no luck.

Does anyone have any ideas why I&#39;m getting the 405 error?

**UPDATE**

As per request, here&#39;s my Department controller code (I will post both the Department controller code for my front end project, as well as the Department ApiController code for the WebAPI):

**Front End Department Controller**

    namespace CallCOP.Controllers
    {
        public class DepartmentController : Controller
        {
            HttpClient client = new HttpClient();
            HttpResponseMessage response = new HttpResponseMessage();
            Uri contactUri = null;
    
            public DepartmentController()
            {
                // set base address of WebAPI depending on your current environment
                client.BaseAddress = new Uri(ConfigurationManager.AppSettings[string.Format(&quot;APIEnvBaseAddress-{0}&quot;, CallCOP.Helpers.ConfigHelper.COPApplEnv)]);
    
                // Add an Accept header for JSON format.
                client.DefaultRequestHeaders.Accept.Add(
                    new MediaTypeWithQualityHeaderValue(&quot;application/json&quot;));
            }
    
            // need to only get departments that correspond to a Contact ID.
            // GET: /Department/?regionId={0}
            public ActionResult Index(int regionId)
            {
                response = client.GetAsync(string.Format(&quot;api/department/GetDeptsByRegionId/{0}&quot;, regionId)).Result;
                if (response.IsSuccessStatusCode)
                {
                    var departments = response.Content.ReadAsAsync&lt;IEnumerable&lt;Department&gt;&gt;().Result;
                    return View(departments);
                }
                else
                {
                    LoggerHelper.GetLogger().InsertError(new Exception(string.Format(
                        &quot;Cannot retrieve the list of department records due to HTTP Response Status Code not being successful: {0}&quot;, response.StatusCode)));
                    return RedirectToAction(&quot;Index&quot;);
                }
    
            }
    
            //
            // GET: /Department/Create
    
            public ActionResult Create(int regionId)
            {
                return View();
            }
    
            //
            // POST: /Department/Create
            [HttpPost]
            [ValidateAntiForgeryToken]
            public ActionResult Create(int regionId, Department department)
            {
                department.RegionId = regionId;
                response = client.PostAsJsonAsync(&quot;api/department&quot;, department).Result;
                if (response.IsSuccessStatusCode)
                {
                    return RedirectToAction(&quot;Edit&quot;, &quot;Region&quot;, new { id = regionId });
                }
                else
                {
                    LoggerHelper.GetLogger().InsertError(new Exception(string.Format(
                        &quot;Cannot create a new department due to HTTP Response Status Code not being successful: {0}&quot;, response.StatusCode)));
                    return RedirectToAction(&quot;Edit&quot;, &quot;Region&quot;, new { id = regionId });
                }
            }
    
            //
            // GET: /Department/Edit/5
    
            public ActionResult Edit(int id = 0)
            {
                response = client.GetAsync(string.Format(&quot;api/department/{0}&quot;, id)).Result;
                Department department = response.Content.ReadAsAsync&lt;Department&gt;().Result;
                if (department == null)
                {
                    return HttpNotFound();
                }
                return View(department);
            }
    
            //
            // POST: /Department/Edit/5
    
            [HttpPost]
            [ValidateAntiForgeryToken]
            public ActionResult Edit(int regionId, Department department)
            {
                response = client.GetAsync(string.Format(&quot;api/department/{0}&quot;, department.Id)).Result;
                contactUri = response.RequestMessage.RequestUri;
                response = client.PutAsJsonAsync(string.Format(contactUri.PathAndQuery), department).Result;
                if (response.IsSuccessStatusCode)
                {
                    return RedirectToAction(&quot;Index&quot;, new { regionId = regionId });
                }
                else
                {
                    LoggerHelper.GetLogger().InsertError(new Exception(string.Format(
                        &quot;Cannot edit the department record due to HTTP Response Status Code not being successful: {0}&quot;, response.StatusCode)));
                    return RedirectToAction(&quot;Index&quot;, new { regionId = regionId });
                }
            }
    
            //
            // GET: /Department/Delete/5
    
            public ActionResult Delete(int id = 0)
            {
                response = client.GetAsync(string.Format(&quot;api/department/{0}&quot;, id)).Result;
                Department department = response.Content.ReadAsAsync&lt;Department&gt;().Result;
    
                if (department == null)
                {
                    return HttpNotFound();
                }
                return View(department);
            }
    
            //
            // POST: /Department/Delete/5
    
            [HttpPost, ActionName(&quot;Delete&quot;)]
            [ValidateAntiForgeryToken]
            public ActionResult DeleteConfirmed(int regionId, int id)
            {
                response = client.GetAsync(string.Format(&quot;api/department/{0}&quot;, id)).Result;
                contactUri = response.RequestMessage.RequestUri;
                response = client.DeleteAsync(contactUri).Result;
                return RedirectToAction(&quot;Index&quot;, new { regionId = regionId });
            }
        }
    }

**Web API Department ApiController**

    namespace CallCOPAPI.Controllers
    {
        public class DepartmentController : ApiController
        {
            private CallCOPEntities db = new CallCOPEntities(HelperClasses.DBHelper.GetConnectionString());
    
            // GET api/department
            public IEnumerable&lt;Department&gt; Get()
            {
                return db.Departments.AsEnumerable();
            }
    
            // GET api/department/5
            public Department Get(int id)
            {
                Department dept = db.Departments.Find(id);
                if (dept == null)
                {
                    throw new HttpResponseException(Request.CreateResponse(HttpStatusCode.NotFound));
                }
    
                return dept;
            }
    
            // this should accept a contact id and return departments related to the particular contact record
            // GET api/department/5
            public IEnumerable&lt;Department&gt; GetDeptsByRegionId(int regionId)
            {
                IEnumerable&lt;Department&gt; depts = (from i in db.Departments
                                                 where i.RegionId == regionId 
                                                 select i);
                return depts;
            }
    
            // POST api/department
            public HttpResponseMessage Post(Department department)
            {
                if (ModelState.IsValid)
                {
                    db.Departments.Add(department);
                    db.SaveChanges();
    
                    HttpResponseMessage response = Request.CreateResponse(HttpStatusCode.Created, department);
                    return response;
                }
                else
                {
                    return Request.CreateErrorResponse(HttpStatusCode.BadRequest, ModelState);
                }
            }
    
            // PUT api/department/5
            public HttpResponseMessage Put(int id, Department department)
            {
                if (!ModelState.IsValid)
                {
                    return Request.CreateErrorResponse(HttpStatusCode.BadRequest, ModelState);
                }
    
                if (id != department.Id)
                {
                    return Request.CreateResponse(HttpStatusCode.BadRequest);
                }
    
                db.Entry(department).State = EntityState.Modified;
    
                try
                {
                    db.SaveChanges();
                }
                catch (DbUpdateConcurrencyException ex)
                {
                    return Request.CreateErrorResponse(HttpStatusCode.NotFound, ex);
                }
    
                return Request.CreateResponse(HttpStatusCode.OK);
            }
    
            // DELETE api/department/5
            public HttpResponseMessage Delete(int id)
            {
                Department department = db.Departments.Find(id);
                if (department == null)
                {
                    return Request.CreateResponse(HttpStatusCode.NotFound);
                }
    
                db.Departments.Remove(department);
    
                try
                {
                    db.SaveChanges();
                }
                catch (DbUpdateConcurrencyException ex)
                {
                    return Request.CreateErrorResponse(HttpStatusCode.NotFound, ex);
                }
    
                return Request.CreateResponse(HttpStatusCode.OK, department);
            }
        }
    }



  [1]: http://i.stack.imgur.com/V9aat.jpg
  [2]: http://i.stack.imgur.com/VsuVL.jpg
  [3]: http://i.stack.imgur.com/Vd8bT.jpg
  [4]: http://i.stack.imgur.com/VtCX4.jpg

Web API Put Request generates an Http 405 Method Not Allowed error

We have an existing application that was build on ASP.NET MVC 4 &amp; Web API. The admin parts of the site use Simple Membership. I&#39;m interested in upgrading the application to MVC 5 / Web API 2, to take advantage of some of the new features that have been added. But it looks like they might be incompatible.

Specifically, after installing the RC packages from NuGet into one of the projects in my solution, and [updating the web.config information][1], the application starts dying during startup on the line that calls `WebSecurity.InitializeDatabaseConnection()`, with this exception:

    [MethodAccessException: Attempt by security transparent method &#39;WebMatrix.WebData.PreApplicationStartCode.OnConnectionOpened(System.Object, WebMatrix.Data.ConnectionEventArgs)&#39; to access security critical method &#39;System.Web.WebPages.HttpContextExtensions.RegisterForDispose(System.Web.HttpContextBase, System.IDisposable)&#39; failed.]
       WebMatrix.WebData.PreApplicationStartCode.OnConnectionOpened(Object sender, ConnectionEventArgs e) +70
       WebMatrix.Data.Database.OnConnectionOpened() +70
       WebMatrix.Data.Database.EnsureConnectionOpen() +51
       WebMatrix.Data.Database.QueryValue(String commandText, Object[] args) +63
       WebMatrix.WebData.DatabaseWrapper.QueryValue(String commandText, Object[] parameters) +13
       WebMatrix.WebData.SimpleMembershipProvider.GetUserId(IDatabase db, String userTableName, String userNameColumn, String userIdColumn, String userName) +206
       WebMatrix.WebData.SimpleMembershipProvider.ValidateUserTable() +87

Other projects in the same solution using Simple Membership that I have *not* upgraded continue to work just fine.

Googling around for more information turns up lots of hits for that exception, of course, but nothing particular to WebMatrix.

FWIW: I know that Microsoft has introduced [(yet another) membership and identity solution][2], but unless there&#39;s a way to use that with the existing Simple Membership tables, or a seamless migration path for all of our existing user data, that&#39;s not really an option for us.



UPDATE (11 Oct)
===============

I just tried this again with a fresh checkout of the current trunk of our app. I&#39;m using Visual Studio 2012, but otherwise followed the instructions from MS for upgrading an existing project. After updating to MVC 5 / Web API 2 / EF 6, the app started up an ran just fine.

There were no explicit trust requirements in the `web.config` to remove. I added the code from [this question][3] to `Global.asax.cs`, and it reports that the app is running with full trust (in IIS Express, just F5-ed from VS).

Re-adding the same call to `InitializeDatabaseConnection()`, it starts dying with the exact same exception.


SOLUTION (28 Oct)
=================

Trying the solution in @Kevin&#39;s update from Friday, I found that it works. It was really strange to me that adding this apparently unrelated package would solve these security issues, and even *more* strange after I removed the package from my solution, and it *kept working*.

Taking a closer look at what was happening, I realized that the reason why this fixes the behavior is quite simple: the `Microsoft.AspNet.WebHelpers` package has two dependencies that were being added to my solution: `Microsoft.AspNet.WebPages.Data` and `Microsoft.AspNet.WebPages.WebData`. **Microsoft has moved the WebMatrix classes into new packages.** 

So added the helpers package fixed the problem, not because of anything it was doing, but because **it was causing updated versions of the broken assemblies to be added** to my solution. The solution to the initial incompatibility, then, is to install these new packages when updating everything else from NuGet:

    Install-Package Microsoft.AspNet.WebPages.WebData

UPDATE (13 May 2015)
====================

It has been [suggested to me][4] that you may also need to manually install the second new package:

    Install-Package Microsoft.AspNet.WebPages.Data

This _should not_ be necessary, because this package is [an explicit dependency][5] of the first, and NuGet should be smart enough to install both. But if you get [an error when building][6], or don&#39;t see NuGet add the dependency, it might help you.


  [1]: http://www.asp.net/mvc/tutorials/mvc-5/how-to-upgrade-an-aspnet-mvc-4-and-web-api-project-to-aspnet-mvc-5-and-web-api-2
  [2]: http://blogs.msdn.com/b/webdev/archive/2013/06/27/introducing-asp-net-identity-membership-system-for-asp-net-applications.aspx
  [3]: https://stackoverflow.com/questions/1064274/get-current-asp-net-trust-level-programmatically
  [4]: https://stackoverflow.com/review/suggested-edits/8047475
  [5]: http://www.nuget.org/packages/Microsoft.AspNet.WebPages.WebData/
  [6]: https://stackoverflow.com/questions/23181104/could-not-load-file-or-assembly-webmatrix-data-version-3-0-0-0

Is ASP.NET MVC 5 incompatible with the WebMatrix SimpleMembershipProvider?

I&#39;m trying to detect when an XMLHttpRequest() fails due to a Cross Origin Error as opposed to a bad request.  For example:

		ajaxObj=new XMLHttpRequest()
		ajaxObj.open(&quot;GET&quot;, url, true); 
		ajaxObj.send(null);

Consider 4 cases for url:

&lt;b&gt;Case 1:&lt;/b&gt; url is a valid address where access-control-allow-origin is properly set

 - Example: `http://192.168.8.35` where I have a server with `Access-Control-Allow-Origin: *` set in the header
 - This is easy to detect as ajaxObj.readyState==4 and ajaxObj.status==200

&lt;b&gt;Case 2:&lt;/b&gt; url is an invalid address at an existing server

 - Example: `http://xyz.google.com` where the server responds but it is not a valid request
 - This results in ajaxObj.readyState==4 and ajaxObj.status==0

&lt;b&gt;Case 3:&lt;/b&gt; url is to a non-existing server ip address

 - Example: `http://192.168.8.6` on my local network where there is nothing to respond
 - This results in ajaxObj.readyState==4 and ajaxObj.status==0

&lt;b&gt;Case 4:&lt;/b&gt; url is a valid address where access-control-allow-origin is &lt;b&gt;NOT&lt;/b&gt; set

 - Example: `http://192.168.8.247` where I have a server &lt;b&gt;without&lt;/b&gt; `Access-Control-Allow-Origin: *` set in the header
 - This results in ajaxObj.readyState==4 and ajaxObj.status==0

The problem is: &lt;b&gt;How do I differentiate Case 4 (access-control-allow-origin error) and Cases 2&amp;3?&lt;/b&gt;

In Case 4, the Chrome debug console shows the error:

`XMLHttpRequest cannot load http://192.168.8.247/. Origin http://localhost is not allowed by Access-Control-Allow-Origin.`

&lt;b&gt;How do I make that error known in Javascript?&lt;/b&gt;

I tried to find some indication in `ajaxObj` but nothing there seems to be different compared to Case 2&amp;3.

Here is a simple test I used:

	&lt;!DOCTYPE html PUBLIC &quot;-//W3C//DTD XHTML 1.0 Transitional//EN&quot; &quot;http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd&quot;&gt;
	&lt;html xmlns=&quot;http://www.w3.org/1999/xhtml&quot;&gt;
	&lt;head&gt;
	&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=utf-8&quot; /&gt;
	&lt;title&gt;CORS Test&lt;/title&gt;
	&lt;script type=&quot;text/javascript&quot;&gt;
	function PgBoot()
	{
	//	doCORS(&quot;http://192.168.8.35&quot;);   // Case 1
	//	doCORS(&quot;http://xyz.google.com&quot;); // Case 2
		doCORS(&quot;http://192.168.8.6&quot;);    // Case 3
	//	doCORS(&quot;http://192.168.8.247&quot;);  // Case 4
	}

	function doCORS(url)
	{
		document.getElementById(&quot;statusDiv&quot;).innerHTML+=&quot;Processing url=&quot;+url+&quot;&lt;br&gt;&quot;;
		var ajaxObj=new XMLHttpRequest();
		ajaxObj.overrideMimeType(&#39;text/xml&#39;);
		ajaxObj.onreadystatechange = function()
		{
			var stat=document.getElementById(&quot;statusDiv&quot;);
			stat.innerHTML+=&quot;readyState=&quot;+ajaxObj.readyState;
			if(ajaxObj.readyState==4)
				stat.innerHTML+=&quot;, status=&quot;+ajaxObj.status;
			stat.innerHTML+=&quot;&lt;br&gt;&quot;;
		}
		ajaxObj.open(&quot;GET&quot;, url, true); 
		ajaxObj.send(null);
	}
	&lt;/script&gt;
	&lt;/head&gt;
	&lt;body onload=&quot;PgBoot()&quot;&gt;
	&lt;div id=&quot;statusDiv&quot;&gt;&lt;/div&gt;
	&lt;/body&gt;
	&lt;/html&gt;

Results using Chrome:

	Processing url=http://192.168.8.35
	readyState=1
	readyState=2
	readyState=3
	readyState=4, status=200
&lt;hr&gt;

	Processing url=http://xyz.google.com
	readyState=1
	readyState=4, status=0
&lt;hr&gt;

 
	Processing url=http://192.168.8.6
	readyState=1
	readyState=4, status=0
&lt;hr&gt;
 
	Processing url=http://192.168.8.247
	readyState=1
	readyState=4, status=0



How to Detect Cross Origin (CORS) Error vs. Other Types of Errors for XMLHttpRequest() in Javascript

I have a setup involving

Frontend server (Node.js, domain: localhost:3000) &lt;---&gt; Backend (Django, Ajax, domain: localhost:8000)

Browser &lt;-- webapp &lt;-- Node.js (Serve the app)

Browser (webapp) --&gt; Ajax --&gt; Django(Serve ajax POST requests)

Now, my problem here is with CORS setup which the webapp uses to make Ajax calls to the backend server. In chrome, I keep getting

&gt; Cannot use wildcard in Access-Control-Allow-Origin when credentials flag is true.

doesn&#39;t work on firefox either.

My Node.js setup is:

    var allowCrossDomain = function(req, res, next) {
        res.header(&#39;Access-Control-Allow-Origin&#39;, &#39;http://localhost:8000/&#39;);
        res.header(&#39;Access-Control-Allow-Credentials&#39;, true);
        res.header(&#39;Access-Control-Allow-Methods&#39;, &#39;GET,PUT,POST,DELETE&#39;);
        res.header(&quot;Access-Control-Allow-Headers&quot;, &quot;Origin, X-Requested-With, Content-Type, Accept&quot;);
        next();
    };

And in Django I&#39;m using [this middleware][1] [along with this][2]


The webapp makes requests as such:

    $.ajax({
        type: &quot;POST&quot;,
        url: &#39;http://localhost:8000/blah&#39;,
        data: {},
        xhrFields: {
            withCredentials: true
        },
        crossDomain: true,
        dataType: &#39;json&#39;,
        success: successHandler
    });

So, the request headers that the webapp sends looks like:

    Access-Control-Allow-Credentials: true
    Access-Control-Allow-Headers: &quot;Origin, X-Requested-With, Content-Type, Accept&quot;
    Access-Control-Allow-Methods: &#39;GET,PUT,POST,DELETE&#39;
    Content-Type: application/json 
    Accept: */*
    Accept-Encoding: gzip,deflate,sdch
    Accept-Language: en-US,en;q=0.8
    Cookie: csrftoken=***; sessionid=&quot;***&quot;

And here&#39;s the response header:

    Access-Control-Allow-Headers: Content-Type,*
    Access-Control-Allow-Credentials: true
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
    Content-Type: application/json

Where am I going wrong?!

Edit 1: I&#39;ve been using `chrome --disable-web-security`, but now want things to actually work.


  [1]: https://gist.github.com/strogonoff/1369619
  [2]: https://github.com/ottoyiu/django-cors-headers

Edit 2: Answer:

So, solution for me `django-cors-headers` config:

    CORS_ORIGIN_ALLOW_ALL = False
    CORS_ALLOW_CREDENTIALS = True
    CORS_ORIGIN_WHITELIST = (
        &#39;http://localhost:3000&#39; # Here was the problem indeed and it has to be http://localhost:3000, not http://localhost:3000/
    )



CORS: Cannot use wildcard in Access-Control-Allow-Origin when credentials flag is true

If CORS is properly setup on a server to only allow a certain origins to access the server,

Is this enough to prevent CSRF attacks?

Does a proper CORS setup prevent CSRF attack?

I am working on this personal project of mine just for fun where I want to read an xml file which is located at http://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml  and parse the xml and use it to convert values between the currencies. 

  So far I have come up with the code below which is pretty basic in order to read the XML but I get the following error.

&gt; XMLHttpRequest cannot load ****. No &#39;Access-Control-Allow-Origin&#39;
&gt; header is present on the requested resource. Origin
&gt; &#39;http://run.jsbin.com&#39; is therefore not allowed access.

    $(document).ready( 
        function() {     
            $.ajax({          
                type:  &#39;GET&#39;,
                url:   &#39;http://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml&#39;,
                dataType: &#39;xml&#39;,              
                success: function(xml){
                    alert(&#39;aaa&#39;);
                }
             });
        }
    );

I don&#39;t see anything wrong with my code so I am hoping someone could point out what I am doing wrong with my code and how I could fix it. 


jQuery XML error &#39; No &#39;Access-Control-Allow-Origin&#39; header is present on the requested resource.&#39;

I&#39;m running into a weird CORS issue right now. 

Here&#39;s the error message:

    XMLHttpRequest cannot load http://localhost:8666/routeREST/select?q=[...] 
    Origin http://localhost:8080 is not allowed by Access-Control-Allow-Origin

Two servers:

* localhost:8666/routeREST/ : this is a simple Python Bottle server.
* localhost:8080/ : Python simpleHTTPserver where I run y Javascript application. This app is executing Ajax requests on the server above.

Any thought on what could be the problem?

EDIT:

And... the port was the problem. Thanks for your answers :)

If anyone is using a Python bottle server as well, you can follow the answer given on this post to solve the CORS issue:
https://stackoverflow.com/questions/17262170/bottle-py-enabling-cors-for-jquery-ajax-requests

Content Type	Original Author	Original Content on Stackoverflow
Question	user1968030	View Question on Stackoverflow
Solution 1 - C#	Adween	View Answer on Stackoverflow
Solution 2 - C#	FlimFlam Vir	View Answer on Stackoverflow
Solution 3 - C#	Stephan	View Answer on Stackoverflow

The type initializer for 'System.Web.Http.GlobalConfiguration' threw an exception

C# Problem Overview

C# Solutions

Solution 1 - C#

Solution 2 - C#

Solution 3 - C#

Null pointer Exception - findViewById()

iOS 7 UITableView: How to remove space between navigation bar and first cell

Attributions