infrastructure/mox
1
0
Fork 0
mirror of https://github.com/mjl-/mox.git synced 2025-07-18 23:26:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

when registering login attempts, use X-Forwarded-For header for finding the IP address

Browse Source 
Which we already did for the rate limiting.

Hopefully solves issue #338.
This commit is contained in:
Mechiel Lukkien
2025-04-22 09:05:34 +02:00
parent ee99e82cf4
commit baacdbca18
2 changed files with 5 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
webapisrv/server.go
View File

@ -18,7 +18,6 @@ import (
"log/slog"
"mime"
"mime/multipart"
"net"
"net/http"
"net/textproto"
"os"
@ -422,7 +421,7 @@ func (s server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
log.Check(werr, "writing error response")
}
la := loginAttempt(r, "webapi", "httpbasic")
la := loginAttempt(remoteIP.String(), r, "webapi", "httpbasic")
la.LoginAddress = email
defer func() {
store.LoginAttemptAdd(context.Background(), log, la)
@ -530,12 +529,7 @@ func (s server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
// loginAttempt initializes a store.LoginAttempt, for adding to the store after
// filling in the results and other details.
func loginAttempt(r *http.Request, protocol, authMech string) store.LoginAttempt {
remoteIP, _, _ := net.SplitHostPort(r.RemoteAddr)
if remoteIP == "" {
remoteIP = r.RemoteAddr
}
func loginAttempt(remoteIP string, r *http.Request, protocol, authMech string) store.LoginAttempt {
return store.LoginAttempt{
RemoteIP: remoteIP,
TLS: store.LoginAttemptTLS(r.TLS),