config.SetCorsPolicyProviderFactory(new CorsPolicyFactory()); web,key will be used when switching mechanism...