Can't call method with PUT or POST - web-services

Question

I can request an API method via http://requestmaker.com/ using GET, but when I use POST or PUT it returns...
HTTP/1.1 403 Forbidden
Here is the method...
[HttpPost]
[Route("api/sales")]
public object Put([FromBody] Sale sale)
{
sale.DateTime = DateTime.Now;
paymentRepository.Insert(sale);
paymentRepository.Save();
return Ok(new { id = sale.SaleId });
}
Any ideas?
Request headers are...
POST /admin/api/sales HTTP/1.1 Host: hello.com Accept: /
Content-Type: text/html Content-Length: 17
Request data...
TourId=3&UserId=1

Answer 1

It has to do with how your Controller is routing the requests. You seem to have defined something like this
Defaults To GET:
public async Task<IHttpActionResult> MethodName(){
return this.Ok()
}
or
[HttpGet]
public async Task<IHttpActionResult> MethodName(){
return this.Ok()
}
There should be some attributes that you can define above the function:
For POST:
[HttpPost]
public async Task<IHttpActionResult> MethodNamePost(){
return this.Ok()
}
For PUT:
[HttpPut]
public async Task<IHttpActionResult> MethodNamePut(){
return this.Ok()
}
Like Win said:
[HttpPut]
[Route("api/sales")]
public object Put([FromBody] Sale sale)
{
sale.DateTime = DateTime.Now;
paymentRepository.Insert(sale);
paymentRepository.Save();
return new { id = sale.SaleId };
}
I would change the return to this.Ok(new {id = sale.SaleId}); though.

Answer 2

Your Request headers are wrong it should be like
{
"UserId":"1",
"TourID":"3",
}
REASON:application/json

Answer 3

Oh silly me, it was looking for an anti-forgery token. I thought I'd commented the filter out, but I'd done it for MVC and not Web Api. Oops.
I also needed to set the content type to application/json and set the data as { "TourId":"3", "UserId":"1" } in order for model binding to work.