wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-07-05 17:30:14 +08:00
Code Issues Packages Projects Releases Wiki Activity

Check X-Forwarded-For header value when tracking IP addresses. Fixes #234

Browse Source
This commit is contained in:
Matt Wright
2014-05-06 12:35:50 -04:00
parent 721b985bc4
commit 58b7fa8e2e
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/utils.py
+5 -1
View File
@@ -62,8 +62,12 @@ def login_user(user, remember=None):
return False
if _security.trackable:
if 'X-Forwarded-For' not in request.headers:
remote_addr = request.remote_addr or 'untrackable'
else:
remote_addr = request.headers.getlist("X-Forwarded-For")[0]
old_current_login, new_current_login = user.current_login_at, datetime.utcnow()
remote_addr = request.remote_addr or 'untrackable'
old_current_ip, new_current_ip = user.current_login_ip, remote_addr
user.last_login_at = old_current_login or new_current_login