fix(auth) : bind Sudloh sessions and stop OAuth redirect loops

2026-10-06 14:28:59 +07:00
parent 2f69115a91
commit 445865bf42
13 changed files with 212 additions and 21 deletions
@@ -69,5 +69,8 @@ describe("request boundaries", () => {
    expect(trustedClientAddress(new Headers({ "x-real-ip": "::ffff:192.0.2.1" }))).toBe("192.0.2.1");
    expect(trustedClientAddress(new Headers({ "x-real-ip": "2001:db8:1:2::1234" })))
      .toBe(trustedClientAddress(new Headers({ "x-real-ip": "2001:0db8:0001:0002:0:0:0:1235" })));
+    process.env.TRUSTED_CLIENT_IP_HEADER = "x-forwarded-for";
+    expect(trustedClientAddress(new Headers({ "x-forwarded-for": "192.0.2.1" }))).toBe("192.0.2.1");
+    expect(trustedClientAddress(new Headers({ "x-forwarded-for": "192.0.2.1, 198.51.100.2" }))).toBe("unknown");
  });
 });