Comparison

mod_http: Set request.ip on all HTTP requests (moves code out of mod_bosh) (fixes #540)

comparison

equal deleted inserted replaced

-:c4222e36333c
+:b4a0bc46c82d
 	function module.unload()
 		server.remove_host(host);
 	end
 end
+local trusted_proxies = module:get_option_set("trusted_proxies", { "127.0.0.1", "::1" })._items;
+local function get_ip_from_request(request)
+	local ip = request.conn:ip();
+	local forwarded_for = request.headers.x_forwarded_for;
+	if forwarded_for then
+		forwarded_for = forwarded_for..", "..ip;
+		for forwarded_ip in forwarded_for:gmatch("[^%s,]+") do
+			if not trusted_proxies[forwarded_ip] then
+				ip = forwarded_ip;
+			end
+		end
+	end
+	return ip;
+end
+module:wrap_object_event(server, false, function (handlers, event_name, event_data)
+	local request = event_data.request;
+	if request then
+		-- Not included in eg http-error events
+		request.ip = get_ip_from_request(request);
+	end
+	return handlers(event_name, event_data);
+end);
 module:provides("net", {
 	name = "http";
 	listener = server.listener;
 	default_port = 5280;
 	multiplex = {