@medialane/sdk 0.106.0 → 0.107.0

package/dist/index.cjs

@@ -1377,8 +1377,19 @@ function createRateLimiter(windowMs, max) {
     return true;
   };
 }
+var TRUSTED_APP_IP_HEADER = "x-medialane-client-ip";
 function requestIp(req) {
-  return req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? "unknown";
+  const fromApp = req.headers.get(TRUSTED_APP_IP_HEADER)?.trim();
+  if (fromApp) return fromApp;
+  const fromEdge = req.headers.get("x-vercel-forwarded-for")?.split(",")[0]?.trim();
+  if (fromEdge) return fromEdge;
+  const forwarded = req.headers.get("x-forwarded-for");
+  if (forwarded) {
+    const hops = forwarded.split(",").map((hop) => hop.trim()).filter(Boolean);
+    const nearest = hops[hops.length - 1];
+    if (nearest) return nearest;
+  }
+  return "unknown";
 }
 
 // src/server/origin.ts
@@ -1981,6 +1992,7 @@ exports.STARKNET_POP_COLLECTION_CLASS_HASH = STARKNET_POP_COLLECTION_CLASS_HASH;
 exports.STARKNET_POP_FACTORY_CONTRACT = STARKNET_POP_FACTORY_CONTRACT;
 exports.SUPPORTED_TOKENS = SUPPORTED_TOKENS;
 exports.SUPPORTED_URL_CHAINS = SUPPORTED_URL_CHAINS;
+exports.TRUSTED_APP_IP_HEADER = TRUSTED_APP_IP_HEADER;
 exports.assetHref = assetHref;
 exports.buildAssetMetadata = buildAssetMetadata;
 exports.chainFromSlug = chainFromSlug;