在来自子域的 ASP.Net Web API GET 请求中获取“安全异常”

Question

我已经在网络上部署了一个测试 asp.net web api 应用程序，但是当我尝试对其进行测试时，它会引发异常。
该应用程序在本地运行。
这是原始 api 链接
http://service.mobinweb.com/api
这是异常详细信息
System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed。
注意：应用程序部署到子域

这是堆栈跟踪

[SecurityException: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
   System.Net.Http.HttpRequestMessageExtensions.GetCorrelationId(HttpRequestMessage request) +0
   System.Web.Http.Tracing.TraceRecord..ctor(HttpRequestMessage request, String category, TraceLevel level) +190
   System.Web.Http.Tracing.SystemDiagnosticsTraceWriter.Trace(HttpRequestMessage request, String category, TraceLevel level, Action`1 traceAction) +102
   System.Web.Http.Tracing.ITraceWriterExtensions.TraceBeginEnd(ITraceWriter traceWriter, HttpRequestMessage request, String category, TraceLevel level, String operatorName, String operationName, Action`1 beginTrace, Action execute, Action`1 endTrace, Action`1 errorTrace) +166
   System.Web.Http.Tracing.Tracers.ContentNegotiatorTracer.Negotiate(Type type, HttpRequestMessage request, IEnumerable`1 formatters) +250
   System.Web.Http.Results.NegotiatedContentResult`1.Execute(HttpStatusCode statusCode, T content, IContentNegotiator contentNegotiator, HttpRequestMessage request, IEnumerable`1 formatters) +76
   System.Net.Http.HttpRequestMessageExtensions.CreateResponse(HttpRequestMessage request, HttpStatusCode statusCode, T value, HttpConfiguration configuration) +111
   System.Net.Http.HttpRequestMessageExtensions.CreateErrorResponse(HttpRequestMessage request, HttpStatusCode statusCode, Func`2 errorCreator) +198
   System.Net.Http.HttpRequestMessageExtensions.CreateErrorResponse(HttpRequestMessage request, HttpStatusCode statusCode, Exception exception) +75
   System.Web.Http.<SendAsync>d__0.MoveNext() +627
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +93
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +52
   System.Web.Http.WebHost.<ProcessRequestAsyncCore>d__0.MoveNext() +233
   System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +93
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +52
   System.Web.TaskAsyncHelper.EndTask(IAsyncResult ar) +60
   System.Web.HttpTaskAsyncHandler.System.Web.IHttpAsyncHandler.EndProcessRequest(IAsyncResult result) +6
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +9628700
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +155

更新： 本地数据结果json是；

[{"Id":3,"Title":"title goes here","Description":"description goes here","CreatedDate":"2013-12-21T00:00:00","Date":"21/12/2013","OrderBy":1,"NavigateUrl":"www.google.com"}]

Answer 1

安全异常意味着trust environment 存在问题。

您可以通过在 web.config 中设置以下内容来快速验证这一点。但是当你让 web api 生效时不要使用它。您需要在上线时设置自定义权限集。

<system.web>
    <trust level="Full" originUrl="" />
  </system.web>