crypto/byteclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

server: trusted_proxies – X-Forwarded-For für Rate-Limit hinter Reverse-Proxy

Browse source
This commit is contained in:
OpenClaw Dev 2026-11-01 04:09:09 +01:00
parent 97646da970
commit 126f4be2b9
6 changed files with 101 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

26
internal/server/clientip_test.go Normal file
View file

@ -0,0 +1,26 @@
package server
import (
"net/http/httptest"
"testing"
)
func TestClientIPTrustedProxy(t *testing.T) {
s := &Server{}
r := httptest.NewRequest("GET", "/", nil)
r.RemoteAddr = "127.0.0.1:1234"
r.Header.Set("X-Forwarded-For", "6.6.6.6, 1.2.3.4")
if got := s.clientIP(r); got != "1.2.3.4" {
t.Fatalf("loopback proxy: got %s", got)
}
r.RemoteAddr = "9.9.9.9:1"
if got := s.clientIP(r); got != "9.9.9.9" {
t.Fatalf("untrusted peer: got %s", got)
}
n, _ := ParseCIDRs([]string{"10.0.1.0/24"})
s.TrustedProxies = n
r.RemoteAddr = "10.0.1.6:1"
if got := s.clientIP(r); got != "1.2.3.4" {
t.Fatalf("cidr proxy: got %s", got)
}
}