proxy-safe request IP

carlos-jenkins · Jan 16, 2018 · 45fda0d · 45fda0d
1 parent c4dc450
commit 45fda0d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/webhooks.py b/webhooks.py
@@ -56,14 +56,17 @@ def index():
     # Allow Github IPs only
     if config.get('github_ips_only', True):
         src_ip = ip_address(
-            u'{}'.format(request.remote_addr)  # Fix stupid ipaddress issue
+            u'{}'.format(request.access_route[0])  # Fix stupid ipaddress issue
         )
         whitelist = requests.get('https://api.github.com/meta').json()['hooks']
 
         for valid_ip in whitelist:
             if src_ip in ip_network(valid_ip):
                 break
         else:
+            logging.error('IP {} not allowed'.format(
+                src_ip
+            ))
             abort(403)
 
     # Enforce secret