darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-17 10:42:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

Experiment with logging a custom request header

Browse Source
This commit is contained in:
venusbb
2017-07-25 17:17:06 +01:00
parent fb601daedc
commit 9da5682c70
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
app/authentication/auth.py
View File

@@ -52,14 +52,18 @@ def restrict_ip_sms():
ip_list = ip_route.split(',')
if len(ip_list) >= 3:
ip = ip_list[len(ip_list) - 3]
current_app.logger.info("Inbound sms ip route list {} OS environ{}"
.format(ip_route, current_app.config.get('SMS_INBOUND_WHITELIST')))
current_app.logger.info("Inbound sms ip route list {}"
.format(ip_route))
# Temporary custom header for route security - to experiment if the header passes through
if request.headers.get("X-Custom-forwarder"):
current_app.logger.info("X-Custom-forwarder {}".format(request.headers.get("X-Custom-forwarder")))
if ip in current_app.config.get('SMS_INBOUND_WHITELIST'):
current_app.logger.info("Inbound sms ip addresses {} passed ".format(ip))
return
else:
current_app.logger.info("Inbound sms ip addresses {} blocked ".format(ip))
current_app.logger.info("Inbound sms ip addresses blocked {}".format(ip))
return
# raise AuthError('Unknown source IP address from the SMS provider', 403)