action_ip_filter 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d061bab952784ba92d038b0a28d34418e9c360d6d6abd543621535170a9a21c
-  data.tar.gz: 8a57d44aa950fb7c9bc0dad8a3493add8c626df62cecea9d0a8536d5ae7bc6d6
+  metadata.gz: af3d4fbb598b8802bc90a29a75a0f6f3d38cd77757a04c8bef538fe34172ba14
+  data.tar.gz: 13e2e5ed9b621b70c27f11046149643d7237fe977766e29722f9f293c5ebe46d
 SHA512:
-  metadata.gz: 7f868950a961ac26cfebace46005f363f4cace350a63d0c58996b20966312a245794b8fe571b0abec32c216baae81e41fad39ea0eb393997348043e650263c3e
-  data.tar.gz: 746dc0312e87366a4d6d4e36e0bd31648255d646fb6f7d103f6e00bb4d68d1863ef4c2154737db74f3655934da81a73737b2b6a920d3338a0e8c9b69faf09afd
+  metadata.gz: 578ca535fedf30d89e7681b286f2d68518cef4a001802d053cd49cc1a42cf9e9f85d7628230b4a28ddf7c54cc6225a158ce4f7f161d8f09c0fb55833adafb154
+  data.tar.gz: 1ba8977aa885e48794147c6c09c1d4c4bbd71f35974371cfb5ef8c75ea47efbf179480fea9f1c6259ea57ac7fdb0fc58e562969a230815bec857aa109da97551

data/CHANGELOG.md

@@ -1,5 +1,29 @@
 ## [Unreleased]
 
+## [0.3.0] - 2025-11-29
+
+### Breaking Changes
+
+#### Change `ip_resolver` to use controller context instead of request parameter
+
+Usage has changed. The `request` parameter in the Proc was previously required, but it is no longer needed. You can now access controller methods (`request`, `params`, etc.) directly instead of receiving `request` as an argument.
+
+Before:
+
+```
+config.ip_resolver = ->(request) {
+  request.headers["X-Forwarded-For"]&.split(",")&.first&.strip || request.remote_ip
+}
+```
+
+After:
+
+```
+config.ip_resolver = -> {
+  request.headers["X-Forwarded-For"]&.split(",")&.first&.strip || request.remote_ip
+}
+```
+
 ## [0.2.0] - 2025-11-28
 
 ### Breaking Changes

data/README.md

@@ -18,6 +18,24 @@ Unlike Rack middleware solutions (e.g., `rack-attack`), action_ip_filter operate
 - Minimal overhead (no processing for unrestricted endpoints)
 - Simple, declarative configuration per controller
 
+### Why not Rails native `rate_limit`?
+
+Rails 8.0 introduced `rate_limit`, which could be adapted for IP filtering:
+
+```ruby
+# a slightly tricky approach involving rate_limit
+rate_limit to: 0, within: 0.second, only: :create, unless: -> {
+  allowed_ips.include?(request.remote_ip)
+}
+```
+
+However, this approach has drawbacks:
+- Semantic mismatch: `rate_limit` is designed for rate limiting, not access control
+- Requires cache store: `rate_limit` needs a cache backend for counting, unnecessary for simple IP allowlists
+- Inverted logic: You're "rate limiting everyone except allowed IPs" rather than "allowing specific IPs"
+
+action_ip_filter provides a purpose-built, declarative API for IP-based access control.
+
 ## Installation
 
 Add to your Gemfile:
@@ -114,7 +132,7 @@ Configure global settings in an initializer:
 # config/initializers/action_ip_filter.rb
 ActionIpFilter.configure do |config|
   # Custom IP resolver (default: request.remote_ip)
-  config.ip_resolver = ->(request) {
+  config.ip_resolver = -> {
     request.headers["X-Forwarded-For"]&.split(",")&.first&.strip || request.remote_ip
   }
 
@@ -133,7 +151,7 @@ end
 
 | Option | Default                             | Description                                        |
 |--------|-------------------------------------|----------------------------------------------------|
-| `ip_resolver` | `->(request) { request.remote_ip }` | Proc that extracts client IP from request |
+| `ip_resolver` | `-> { request.remote_ip }` | Proc that extracts client IP from request |
 | `on_denied` | `-> { head :forbidden }`            | Handler called when access is denied (returns 403) |
 | `logger` | `Rails.logger`                      | Logger instance for denied request logging |
 | `log_denials` | `true`                              | Whether to log denied requests as warn level |

data/lib/action_ip_filter/configuration.rb

@@ -2,19 +2,19 @@
 
 module ActionIpFilter
   class Configuration
-    # @rbs @ip_resolver: ^(ActionDispatch::Request) -> String?
+    # @rbs @ip_resolver: ^() -> String?
     # @rbs @on_denied: ^() -> void
     # @rbs @logger: Logger?
     # @rbs @log_denials: bool
 
-    attr_accessor :ip_resolver #: ^(ActionDispatch::Request) -> String?
+    attr_accessor :ip_resolver #: ^() -> String?
     attr_accessor :on_denied #: ^() -> void
     attr_accessor :logger #: Logger?
     attr_accessor :log_denials #: bool
 
     # @rbs return: void
     def initialize
-      @ip_resolver = ->(request) { request.remote_ip }
+      @ip_resolver = -> { request.remote_ip } # steep:ignore NoMethod
       @on_denied = -> { head :forbidden } # steep:ignore NoMethod
       @logger = nil
       @log_denials = true

data/lib/action_ip_filter/ip_filterable.rb

@@ -62,7 +62,7 @@ module ActionIpFilter
     def verify_ip_access(restriction)
       return if restriction.nil? || ActionIpFilter.test_mode?
 
-      client_ip = ActionIpFilter.configuration.ip_resolver.call(request)
+      client_ip = instance_exec(&ActionIpFilter.configuration.ip_resolver) #: String?
       allowed_ips = resolve_allowed_ips(restriction[:allowed_ips])
 
       unless IpMatcher.allowed?(client_ip, allowed_ips)

data/lib/action_ip_filter/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ActionIpFilter
-  VERSION = "0.2.0" #: String
+  VERSION = "0.3.0" #: String
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: action_ip_filter
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - SmartBank, Inc.