I am using Apache 2.4 for Windows, with Windows 10.
I have configured a reverse proxy with the Apache server.
My web application works behind the Apache reverse proxy.
I am trying to use my web application ('http://192.168.1.2:20100) to copy a
jpeg picture from another website which unfortunately has no CORS configuration
('http://192.168.1.103:80). I have no access to change it.
The schematic is to have my web application send a request to the Apache
server. The Apache server copy the jpeg image from the website. Then the
picture is sent back to my web application by the Apache server.
Below is the configuration on the Apache server to enable CORS:
Listen 192.168.1.2:8080
<FilesMatch "\.(gif|ico|jpe?g|png)$">
Header always set Access-Control-Allow-Origin: http://192.168.1.2
Header always set Access-Control-Allow-Credentials: true
Header always set Access-Control-Max-Age: 86400
Header always set Access-Control-Allow-Headers
"X-Requested-With,Origin,Authorization,X-Accept-Charset,X-Accept,Content-Type"
Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS"
Header always set Access-Control-Request-Headers
"X-Requested-With,Origin,Authorization,X-Accept-Charset,X-Accept,Content-Type"
RewriteEngine On
RewriteCond %{REQUEST_METHOD} OPTIONS
RewriteRule ^(.*)$ $1 [R=200,L,E=HTTP_ORIGIN:%{HTTP:ORIGIN}]]
</FilesMatch>
This configuration is in the Apache httpd.conf file.
When I run my web application, I am getting the error message below:
Access to Image at 'http://192.168.1.103:80' from origin
'http://192.168.1.103:80'
has been blocked by CORS policy: No 'Access-Control-Allow-Origin'
header is present on the requested resource. Origin 'http://192.168.1.2:8080'
is therefore not allowed access.
So, I think the problem is that the Apache server transmits the CORS request,
from my web application, to the target website which cannot accept it. So the
CORS request from my web application must not be transmitted to the target
website by the Apache server.
So, how can I configure the Apache server so that it will receive and accept
the CORS from my web application but will submit a normal request (without
CORS) to the target website?
