auth-centric-firewall 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 669fd19673965861241121a8c8a1744f298e19b7116b0d96a6c2337d9a9b6a0c
-  data.tar.gz: d13c16055743036a648bfe7a27844924da16c8a0099e0a45569b6da3752a1238
+  metadata.gz: fa83cf63aef7579194a4afd61f67fa84b0297a4f41f31ad75ec62bb2ae83a958
+  data.tar.gz: 3178e1eb516b2f0bfc1c9cc4d9dd8b8b2137e445bdeeddd4d790b4928374d918
 SHA512:
-  metadata.gz: 2d5efc53a5a8bb3dee51368aa9720282ea44ed7aea60c412fcdb007e93945f8f6907a0581d71b5f1cc29860323996161b52c9bb2f6bc058cdfcb734c829e566d
-  data.tar.gz: e85bacf437f529c59e17ad92518b2cc662d2516f943a38a30cd70493c843b3e3f6a4d701a27cb11bf2674b075aae09ecccc0be41e749f533e7b8a05d0db3acf3
+  metadata.gz: 13e77b2efc5455543311dd8f46cf83fe7301803c9e240ad66b9aa4024fc551c34efd160c85c9659aff990d4313a3de13e16f2493733c7266d04b49b3ebd6b846
+  data.tar.gz: 1b38cd09deaf5630699d7b84f83eb48dc68cad3f89d1ee6b6b32b0a0ee0d071dca85bcb6b47c55690c0420ee55f7cf547324703ab3eb6a08dc73667efdd428c0

data/.rubocop.yml

@@ -14,6 +14,7 @@ Layout/IndentationConsistency:
 Naming/PredicateName:
   AllowedMethods:
     - has_access?
+    - is_ipv6?
   NamePrefix:
     - is_
     - has_

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 ## [Released]
 
+## [0.1.1, 0.1.2] - 2025-05-17
+
+- Try to find real I.P
+
 ## [0.1.0] - 2025-04-14
 
 - Pass exception that has occurred

data/README.md

@@ -4,27 +4,7 @@ Stop bad actors.
 
 ## Installation
 
-
-```bash
-bundle add auth-centric-firewall
-```
-
-If bundler is not being used to manage dependencies, install the gem by executing:
-
-```bash
-gem install auth-centric-firewall
-```
-
-## Usage
-
-### Env Variables
-
-```bash
-AUTH_CENTRIC_ENABLED=true
-AUTH_CENTRIC_HOST=http://localhost:3003
-AUTH_CENTRIC_API_KEY=...
-AUTH_CENTRIC_TIMEOUT_SECONDS=3
-```
+See service docs in another project.
 
 ## Contributing
 

data/lib/auth/centric/firewall/capture_request.rb

@@ -25,7 +25,7 @@ module Auth
         end
 
         def ip
-          @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
+          @ip ||= InternetProtocol.new(@request).ip
         end
 
         def domain

data/lib/auth/centric/firewall/internet_protocol.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Firewall
+      # Try to find the IPv4
+      class InternetProtocol
+        require 'ipaddr'
+
+        def initialize(request)
+          @request = request
+        end
+
+        def ip
+          return @ip unless @ip.blank?
+
+          @ip = @request.env['HTTP_X_REAL_IP'] || @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
+          return @ip unless @ip.include?(',')
+
+          @ip.split(',').each do |ip|
+            next if is_ipv6?(ip.strip)
+
+            @ip = ip.strip
+            break
+          end
+
+          @ip
+        end
+
+        def is_ipv6?(ip_string)
+          IPAddr.new(ip_string).ipv6?
+        rescue IPAddr::AddressFamilyError, IPAddr::InvalidAddressError
+          false
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/firewall/version.rb

@@ -3,7 +3,7 @@
 module Auth
   module Centric
     module Firewall
-      VERSION = '0.1.0'
+      VERSION = '0.1.2'
     end
   end
 end

data/lib/auth/centric/firewall.rb

@@ -6,6 +6,7 @@ require 'http'
 require_relative 'firewall/version'
 require_relative 'firewall/constants'
 require_relative 'firewall/capture_request'
+require_relative 'firewall/internet_protocol'
 
 module Auth
   module Centric
@@ -37,7 +38,7 @@ module Auth
       def valid_ip?(request, forced: false)
         return true unless enabled?
 
-        ip_address = request.env['HTTP_X_FORWARDED_FOR'] || request.remote_ip
+        ip_address = InternetProtocol.new(request).ip
         return true if !forced && IGNORE_IP.include?(ip_address)
 
         http = HTTP

data/sig/auth/centric/firewall/capture_request.rbs

@@ -2,6 +2,7 @@ module Auth
   module Centric
     module Firewall
       class CaptureRequest
+        @ip: string
         @request: Net::HTTPRequest
 
         def as_json: -> { }

data/sig/auth/centric/firewall/internet_protocol.rbs

@@ -0,0 +1,13 @@
+module Auth
+  module Centric
+    module Firewall
+      class InternetProtocol
+        @ip: string
+        @request: Net::HTTPRequest
+
+        def ip: -> string
+        def is_ipv6?: -> bool
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-centric-firewall
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Saimon Lovell
@@ -23,6 +23,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5'
+- !ruby/object:Gem::Dependency
+  name: ipaddr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
 description: Uses A.I to analyze connections to find hackers.
 email:
 - staysynchronize@gmail.com
@@ -40,12 +54,14 @@ files:
 - lib/auth/centric/firewall.rb
 - lib/auth/centric/firewall/capture_request.rb
 - lib/auth/centric/firewall/constants.rb
+- lib/auth/centric/firewall/internet_protocol.rb
 - lib/auth/centric/firewall/version.rb
 - public/403.html
 - sig/auth/centric/firewall.rbs
 - sig/auth/centric/firewall/capture_request.rbs
 - sig/auth/centric/firewall/check_ip.rbs
 - sig/auth/centric/firewall/constants.rbs
+- sig/auth/centric/firewall/internet_protocol.rbs
 - sig/ignore_header_keys.rbs
 - sig/ignore_ip.rbs
 - sig/ignore_request.rbs
@@ -72,7 +88,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.8
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Use artificial intelligence to find hackers.
 test_files: []