tyler.durden
/
dashy
mirror of https://github.com/Lissy93/dashy.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Proxy IP check for header security

This commit is contained in:
Todd E Johnson 2023-11-24 00:11:04 -06:00
parent 756d640d06
commit 821ed3433b
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
services/get-user.js
View File

@ -2,8 +2,12 @@ module.exports = (config, req) => {
try { try {
if ( config.appConfig.auth.enableHeaderAuth ) { if ( config.appConfig.auth.enableHeaderAuth ) {
const userHeader = config.appConfig.auth.headerAuth.userHeader; const userHeader = config.appConfig.auth.headerAuth.userHeader;
return { "success": true, "user": req.headers[userHeader.toLowerCase()] }; const proxyWhitelist = config.appConfig.auth.headerAuth.proxyWhitelist;
if ( proxyWhitelist.includes(req.socket.remoteAddress) ) {
return { "success": true, "user": req.headers[userHeader.toLowerCase()] };
}
} }
return {};
} catch (e) { } catch (e) {
console.warn("Error get-user: ", e); console.warn("Error get-user: ", e);
return { 'success': false }; return { 'success': false };