[CORS] Consider attaching error message in failed preflight request.

A failed preflight request returns 400 or 404 with none error message. It is hard to debug from client. CORS Spec does not define what we can put in error preflight response's body [1]. Consider...

Id #1182 | Release: None | Updated: Today at 4:23 PM by trdai | Created: Today at 4:23 PM by trdai

[CORS] The origin URL in CORS in setting should be normalized before comparison

URL like http://example.com:1234/ and http://example.com:1234 should treated as same origin [1]. It is not true in current implementation. We compare the CORS origin literally without normalizing t...

Id #1181 | Release: None | Updated: Today at 4:26 PM by trdai | Created: Today at 4:20 PM by trdai

asp.net mvc facebooktemplate causes “'Newtonsoft.Json.Linq.JObject' does not contain a definition for 'user_id'” when run in a facebook app

Been following the tutorial for the new facebook mvc template from http://go.microsoft.com/fwlink/?LinkId=269921 However even with the basic app template I'm unable to get it to run as it just fl...

Id #1180 | Release: None | Updated: Today at 12:06 PM by Darkside | Created: Today at 12:06 PM by Darkside

Don't use ClientDisconnectedToken on Web Host yet

HttpResponseBase.ClientDisconnectedToken currently has reliability problems. We shouldn't use it until as our cancellationToken in Web API WebHost until these problems are fixed.

Id #1179 | Release: v5.0 RC | Updated: Mon at 10:29 PM by davidmatson | Created: Mon at 10:20 PM by davidmatson

Depend upon abstractions instead of concrete implementations for instancing Edm* types

For example, EdmEntityObjectCollections constructor takes a IList<EdmObject> instead of a List<IEdmObject>. This limit the ability for third parties to provide their own untyped implementation. R...

Id #1178 | Release: None | Updated: Mon at 5:02 PM by jacalvar | Created: Mon at 5:02 PM by jacalvar

some Message handlers not executed with attr routing

Some message handlers are not executed with attribute routing in WebHost if there’s not an existing route. (They’re always executed in SelfHost) This is the general case of issue 954, and is relat...

Id #1177 | Release: None | Updated: Mon at 4:56 PM by kichalla | Created: Mon at 4:13 PM by MikeStall

HttpActionExecutedContext.Response setter throws exception

Simple object initializer setting the response property var context = new HttpActionExecutedContext { Response = new Http.HttpResponseMessage() }; throws an exception: System.NullReferenceExcepti...

Id #1176 | Release: None | Updated: Sat at 6:25 AM by abatishchev | Created: Sat at 6:25 AM by abatishchev

[OData] Deserialization should fail when a required field is not present on the Payload

Having an entity like the following: public class UntypedCustomer { public int Id { get; set; } public string Name { get; set; } public virtual IList<UntypedOrder> Orders { get; set; } ...

Id #1175 | Release: None | Updated: Sat at 12:08 AM by jacalvar | Created: Sat at 12:08 AM by jacalvar

Set metadata url in ODataMediaTypeFormatter for ODataErrors

The current code for ODataMediaTypeFormatter contains the following code fragment: // The MetadataDocumentUri is never required for errors. Additionally, it sometimes won't be available ...

Id #1174 | Release: None | Updated: Fri at 9:19 PM by jacalvar | Created: Fri at 9:19 PM by jacalvar

In OWIN environment, for some cases 404 response does not have error message in the body

Scenario: User has a Katana based selfhosted application and is making a request to a non-existing controller Issue: Response body does not have the detailed error message that Web API usuall...

Id #1173 | Release: None | Updated: Fri at 7:34 PM by kichalla | Created: Fri at 7:30 PM by kichalla