Reverse Proxy Server for CORS Error Reduction

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Electronic transactions often face rejection due to cross-origin resource sharing (CORS) errors caused by modifications in message headers to bypass domain filters, leading to incomplete transactions.

Innovation Solution

A reverse proxy server intercepts client-side messages, updates request and response headers to indicate whitelisted domains, ensuring compliance with CORS security criteria, thereby preventing rejections and enabling successful data exchange between client computing devices and destination servers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the reverse proxy server modifies the origin headers to bypass domain filters, then the request can access the destination server, but the response message faces CORS errors when reaching the client computing device

Engineering Contradiction:

Improvedomain access capabilityVSAvoidCORS error occurrence

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The reverse proxy server acts as an intermediary between the client computing device and the destination server. It receives the client's request, modifies the origin header to a whitelisted domain to bypass the destination server's filter, forwards the modified request, receives the response, and then modifies the response's Access-Control-Allow-Origin header to include the original client domain. This double-modification approach allows the proxy to satisfy both the destination server's domain restriction and the client's CORS policy.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The solution involves changing the domain parameter in the request header from the original client domain to a whitelisted domain, and then changing the Access-Control-Allow-Origin parameter in the response header to include the original client domain. These parameter modifications enable the request to pass through the destination server's domain filter while still allowing the client to accept the response without CORS errors.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If the reverse proxy server modifies request headers to indicate whitelisted domains, then CORS security criteria are satisfied, but the original domain information is lost

Engineering Contradiction:

ImproveCORS security complianceVSAvoidoriginal domain information

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The reverse proxy server performs preliminary actions by storing the original domain information from the request header before modifying it to a whitelisted domain. This stored original domain information is then used when modifying the response header to ensure the client's CORS policy is satisfied. This preliminary preservation of information prevents data loss while enabling the necessary domain modification.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20250023939A1Reverse proxy server for reducing errors during communication between computer systems

Publication Date: 2025.01.16 CAPITAL ONE SERVICES LLC

AI summary

A method and related system of operations include obtaining, from a client computing device, a request comprising a request header field that is populated with a first domain name and updating the request by modifying the request header field to comprise a second domain name. The method further includes sending the updated request to a server, receiving a response comprising a response header, and updating the response by modifying a response header field of the response header to indicate the first domain name as an origin domain of the response. The method further includes sending the updated response to the client computing device.