discourse
/
discourse-oauth2-basic
mirror of https://github.com/discourse/discourse-oauth2-basic.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

added HTTP_X_FORWARDED_FOR header when sending oauth request

This commit is contained in:
Even Lo (羅聖智) 2024-12-13 17:02:11 +08:00
parent 6de97fb641
commit 4ec8f33292
1 changed files with 17 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
lib/oauth2_basic_authenticator.rb
View File

@ -45,11 +45,25 @@ class OAuth2BasicAuthenticator < Auth::ManagedAuthenticator
# This is a little unusual, and utilising multiple authentication methods
# is technically disallowed by the spec (RFC2749 Section 5.2)
opts[:client_options][:auth_scheme] = :request_body
opts[:token_params] = {
headers: {
"Authorization" => basic_auth_header,
},
headers = {
"Authorization" => basic_auth_header
}
# 從 env["HTTP_X_FORWARDED_FOR"] 提取值，並檢查是否存在
if env["HTTP_X_FORWARDED_FOR"].present?
# 提取第一個 IP（通常是用戶端的真實 IP）
forwarded_for = env["HTTP_X_FORWARDED_FOR"].split(",").first.strip
headers["X-Forwarded-For"] = forwarded_for if forwarded_for.present?
end
opts[:token_params] = {
headers: headers
}
# opts[:token_params] = {
# headers: {
# "Authorization" => basic_auth_header,
# },
# }
elsif SiteSetting.oauth2_send_auth_header?
opts[:client_options][:auth_scheme] = :basic_auth
else