I am creating a Web API (Controller) inside my Sitecore solution by inheriting
EnableCors attribute. This service will be called from any IPhone/Android Application (currently not sure how they will call).
For initial testing, I created an external console application and calling this API controller inside this.
Then I am loading my Sitecore page and attaching my solution to this (w3wp.exe) process in debug mode, also a breakpoint on my API method.
It is getting called successfully till I am in debugging mode. My external console application is unable to call this API controller method when it is not in debugging mode. I am unaware of any settings that I need to do to get this service called from an external application, while it is hosted in upper environments (Prod/QA).
Are there any configuration settings that I need to modify (only for this API controller and method) without compromising the security for other items?