Uploaded image for project: 'Repose'
  1. REP-7054

IP User filter doesn't use X-Forwarded-For header for X-PP-Groups

    Details

    • Type: Bug
    • Status: Resolved (View workflow)
    • Priority: High
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: 8.9.0.1
    • Component/s: None
    • Labels:
      None
    • Epic Link:
    • Sprint:
      Sprint 170
    • Story Points:
      2
    • Capitalizable:
      True

      Description

      If a request goes through a proxy server, the IP address of the original client gets put into the X-Forwarded-For header, and the IP address in the request gets updated to the IP of the proxy server. The IP Identity filter checked for an X-Forwarded-For header, and so does the IP User filter but only when populating the X-PP-User header. Unfortunately, we aren't taking it into consideration when populating the X-PP-Groups header.

      IP User filter docs:
      http://www.openrepose.org/versions/8.9.0.0/filters/ip-user.html

      Acceptance Criteria:

      • The X-PP-Groups header will be populated with the configured group header containing a CIDR that matches the X-Forwarded-For header if it's present and the source IP address of the request otherwise.

        Attachments

          Issue links

            Activity

              People

              • Assignee:
                dimalg1 Dimitry Ushakov
                Reporter:
                mario.lopez Mario Lopez
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: