mikhail/parr_api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(api): получения ip адреса за балансировщиком

Browse Source
This commit is contained in:
Mikhail Trubnikov
2023-12-04 10:56:29 +10:00
parent 68e15021ec
commit 9de290aca6
2 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
PARR.API/Authentication/ParrAuthenticationHandler.cs
View File

@@ -25,7 +25,7 @@ namespace PARR.API.Authentication
var ipClient = Request.HttpContext.Connection.RemoteIpAddress?.MapToIPv4().ToString();
if (ipClient == null)
return AuthenticateResult.Fail($"IP address not defined.");
return AuthenticateResult.Fail($"IP address not defined. IP: {ipClient}");
// Аутентификация - просто проверка, есть ли у нас такой пользователь
using (var scope = serviceProvider.CreateScope())
@@ -34,11 +34,11 @@ namespace PARR.API.Authentication
var userIsBlocked = await authService.UserIsBlockedAsync(ipClient);
if (userIsBlocked)
return AuthenticateResult.Fail($"IP address is on the blocking list.");
return AuthenticateResult.Fail($"IP address is on the blocking list. IP: {ipClient}");
var user = await authService.GetUserAsync(ipClient);
if (user == null)
return AuthenticateResult.Fail($"IP address not defined.");
return AuthenticateResult.Fail($"IP address not defined. IP: {ipClient}");
// пользователь найден, аутентификация пройдена

10
PARR.API/Program.cs
View File

@@ -1,5 +1,6 @@
using Elastic.CommonSchema.Serilog;
using FluentValidation;
using Microsoft.AspNetCore.HttpOverrides;
using Microsoft.AspNetCore.Server.HttpSys;
using PARR.API.Authentication;
using PARR.API.Installers;
@@ -38,6 +39,15 @@ builder.Services.AddAuthentication(ParrAuthenticationOptions.DefaultScheme)
// не используем, так как проверка ролей остается прежней, а роли подставляем в ParrAuthenticationHandler
//builder.Services.AddSimpleRoleAuthorization<BaseSimpleRoleProvider>();
// При использовании балансировщика (haproxy, перенаправлять заголовки)
builder.Services.Configure<ForwardedHeadersOptions>(options =>
{
options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
options.KnownNetworks.Clear();
options.KnownProxies.Clear();
});
builder.Services.AddHttpContextAccessor();