diff options
author | Matthew Wild <mwild1@gmail.com> | 2010-08-28 22:25:12 +0100 |
---|---|---|
committer | Matthew Wild <mwild1@gmail.com> | 2010-08-28 22:25:12 +0100 |
commit | be6148a1eb775be9a5169e00bdf5365051eb20d1 (patch) | |
tree | 2dd86984f50b9ee6370f1b30de798065164e3186 /plugins | |
parent | b465aa90b9329425ed4cf79895f86c320e9af11a (diff) | |
download | prosody-be6148a1eb775be9a5169e00bdf5365051eb20d1.tar.gz prosody-be6148a1eb775be9a5169e00bdf5365051eb20d1.zip |
mod_bosh: Support for reading the client's real IP through HTTP proxies from X-Forwarded-For
Diffstat (limited to 'plugins')
-rw-r--r-- | plugins/mod_bosh.lua | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/plugins/mod_bosh.lua b/plugins/mod_bosh.lua index e07ffbaa..b9106083 100644 --- a/plugins/mod_bosh.lua +++ b/plugins/mod_bosh.lua @@ -55,6 +55,22 @@ if cross_domain then end end +local trusted_proxies = module:get_option_set("trusted_proxies", {"127.0.0.1"})._items; + +local function get_ip_from_request(request) + local ip = request.handler:ip(); + local forwarded_for = request.headers["x-forwarded-for"]; + if forwarded_for then + forwarded_for = forwarded_for..", "..ip; + for forwarded_ip in forwarded_for:gmatch("[^%s,]+") do + if not trusted_proxies[forwarded_ip] then + ip = forwarded_ip; + end + end + end + return ip; +end + local t_insert, t_remove, t_concat = table.insert, table.remove, table.concat; local os_time = os.time; @@ -216,10 +232,12 @@ function stream_callbacks.streamopened(request, attr) bosh_hold = BOSH_DEFAULT_HOLD, bosh_max_inactive = BOSH_DEFAULT_INACTIVITY, requests = { }, send_buffer = {}, reset_stream = bosh_reset_stream, close = bosh_close_stream, dispatch_stanza = core_process_stanza, - log = logger.init("bosh"..sid), secure = consider_bosh_secure or request.secure + log = logger.init("bosh"..sid), secure = consider_bosh_secure or request.secure, + ip = get_ip_from_request(request); }; sessions[sid] = session; + session.log("debug", "BOSH session created for request from %s", session.ip); log("info", "New BOSH session, assigned it sid '%s'", sid); local r, send_buffer = session.requests, session.send_buffer; local response = { headers = default_headers } @@ -324,7 +342,6 @@ function stream_callbacks.handlestanza(request, stanza) if stanza.attr.xmlns == xmlns_bosh then stanza.attr.xmlns = nil; end - session.ip = request.handler:ip(); core_process_stanza(session, stanza); end end |