mirror of
https://github.com/wassname/flask-security.git
synced 2026-08-14 12:20:13 +08:00
Merge pull request #352 from fuhrysteve/develop
X-Forwarded-For can contain multiple IP addresses
This commit is contained in:
@@ -62,10 +62,10 @@ def login_user(user, remember=None):
|
||||
return False
|
||||
|
||||
if _security.trackable:
|
||||
if 'X-Forwarded-For' not in request.headers:
|
||||
remote_addr = request.remote_addr or 'untrackable'
|
||||
if 'X-Forwarded-For' in request.headers:
|
||||
remote_addr = request.headers.getlist("X-Forwarded-For")[0].rpartition(' ')[-1]
|
||||
else:
|
||||
remote_addr = request.headers.getlist("X-Forwarded-For")[0]
|
||||
remote_addr = request.remote_addr or 'untrackable'
|
||||
|
||||
old_current_login, new_current_login = user.current_login_at, datetime.utcnow()
|
||||
old_current_ip, new_current_ip = user.current_login_ip, remote_addr
|
||||
|
||||
Reference in New Issue
Block a user