auth-centric-firewall 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e287e19f12735e9c687cb6f79450e78abd78cc28e6b5c9c423444606a3b019fb
-  data.tar.gz: b3865f72602036e7f9e02280c6bcfb48e8df7f5fdcf1a37cd2dd1588b8599b88
+  metadata.gz: fa83cf63aef7579194a4afd61f67fa84b0297a4f41f31ad75ec62bb2ae83a958
+  data.tar.gz: 3178e1eb516b2f0bfc1c9cc4d9dd8b8b2137e445bdeeddd4d790b4928374d918
 SHA512:
-  metadata.gz: e725fadcc1372ca2363bfc0f726b8e07a70999ba37574e53e7a674988e2a1977431454c8a8d2be31760ccf0795083aea066a1df6a7b3f587e18695ecb6c5b844
-  data.tar.gz: bd2fc5072fa375ac835f5bc3be163df97a41c1bdd21f01481e45e81e1167a5c800a98e4dfe114eca06081d5de0172eb6d502658f85bf481c4d11743806848d62
+  metadata.gz: 13e77b2efc5455543311dd8f46cf83fe7301803c9e240ad66b9aa4024fc551c34efd160c85c9659aff990d4313a3de13e16f2493733c7266d04b49b3ebd6b846
+  data.tar.gz: 1b38cd09deaf5630699d7b84f83eb48dc68cad3f89d1ee6b6b32b0a0ee0d071dca85bcb6b47c55690c0420ee55f7cf547324703ab3eb6a08dc73667efdd428c0

data/.rubocop.yml

@@ -14,6 +14,7 @@ Layout/IndentationConsistency:
 Naming/PredicateName:
   AllowedMethods:
     - has_access?
+    - is_ipv6?
   NamePrefix:
     - is_
     - has_

data/CHANGELOG.md

@@ -1,6 +1,6 @@
 ## [Released]
 
-## [0.1.1] - 2025-05-17
+## [0.1.1, 0.1.2] - 2025-05-17
 
 - Try to find real I.P
 

data/lib/auth/centric/firewall/capture_request.rb

@@ -25,7 +25,7 @@ module Auth
         end
 
         def ip
-          @request.env['HTTP_X_REAL_IP'] || @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
+          @ip ||= InternetProtocol.new(@request).ip
         end
 
         def domain

data/lib/auth/centric/firewall/internet_protocol.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Auth
+  module Centric
+    module Firewall
+      # Try to find the IPv4
+      class InternetProtocol
+        require 'ipaddr'
+
+        def initialize(request)
+          @request = request
+        end
+
+        def ip
+          return @ip unless @ip.blank?
+
+          @ip = @request.env['HTTP_X_REAL_IP'] || @request.env['HTTP_X_FORWARDED_FOR'] || @request.remote_ip
+          return @ip unless @ip.include?(',')
+
+          @ip.split(',').each do |ip|
+            next if is_ipv6?(ip.strip)
+
+            @ip = ip.strip
+            break
+          end
+
+          @ip
+        end
+
+        def is_ipv6?(ip_string)
+          IPAddr.new(ip_string).ipv6?
+        rescue IPAddr::AddressFamilyError, IPAddr::InvalidAddressError
+          false
+        end
+      end
+    end
+  end
+end

data/lib/auth/centric/firewall/version.rb

@@ -3,7 +3,7 @@
 module Auth
   module Centric
     module Firewall
-      VERSION = '0.1.1'
+      VERSION = '0.1.2'
     end
   end
 end

data/lib/auth/centric/firewall.rb

@@ -6,6 +6,7 @@ require 'http'
 require_relative 'firewall/version'
 require_relative 'firewall/constants'
 require_relative 'firewall/capture_request'
+require_relative 'firewall/internet_protocol'
 
 module Auth
   module Centric
@@ -37,7 +38,7 @@ module Auth
       def valid_ip?(request, forced: false)
         return true unless enabled?
 
-        ip_address = request.env['HTTP_X_FORWARDED_FOR'] || request.remote_ip
+        ip_address = InternetProtocol.new(request).ip
         return true if !forced && IGNORE_IP.include?(ip_address)
 
         http = HTTP

data/sig/auth/centric/firewall/capture_request.rbs

@@ -2,6 +2,7 @@ module Auth
   module Centric
     module Firewall
       class CaptureRequest
+        @ip: string
         @request: Net::HTTPRequest
 
         def as_json: -> { }

data/sig/auth/centric/firewall/internet_protocol.rbs

@@ -0,0 +1,13 @@
+module Auth
+  module Centric
+    module Firewall
+      class InternetProtocol
+        @ip: string
+        @request: Net::HTTPRequest
+
+        def ip: -> string
+        def is_ipv6?: -> bool
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth-centric-firewall
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Saimon Lovell
@@ -23,6 +23,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5'
+- !ruby/object:Gem::Dependency
+  name: ipaddr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
 description: Uses A.I to analyze connections to find hackers.
 email:
 - staysynchronize@gmail.com
@@ -40,12 +54,14 @@ files:
 - lib/auth/centric/firewall.rb
 - lib/auth/centric/firewall/capture_request.rb
 - lib/auth/centric/firewall/constants.rb
+- lib/auth/centric/firewall/internet_protocol.rb
 - lib/auth/centric/firewall/version.rb
 - public/403.html
 - sig/auth/centric/firewall.rbs
 - sig/auth/centric/firewall/capture_request.rbs
 - sig/auth/centric/firewall/check_ip.rbs
 - sig/auth/centric/firewall/constants.rbs
+- sig/auth/centric/firewall/internet_protocol.rbs
 - sig/ignore_header_keys.rbs
 - sig/ignore_ip.rbs
 - sig/ignore_request.rbs