@openneuro/server 4.44.4 → 4.44.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openneuro/server",
-  "version": "4.44.4",
+  "version": "4.44.5",
   "description": "Core service for the OpenNeuro platform.",
   "license": "MIT",
   "main": "src/server.js",
@@ -21,9 +21,9 @@
     "@elastic/elasticsearch": "8.13.1",
     "@graphql-tools/schema": "^10.0.0",
     "@keyv/redis": "^4.5.0",
-    "@openneuro/search": "^4.44.4",
-    "@sentry/node": "^8.25.0",
-    "@sentry/profiling-node": "^8.25.0",
+    "@openneuro/search": "^4.44.5",
+    "@sentry/node": "^10.37.0",
+    "@sentry/profiling-node": "^10.37.0",
     "base64url": "^3.0.0",
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",
@@ -89,5 +89,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "1f19e9260ba364a821864f48233e281507c0640a"
+  "gitHead": "337fffde4c5ea0c3f6f26f7f93d5357197036aa7"
 }

package/src/libs/authentication/jwt.ts

@@ -2,6 +2,7 @@ import passport from "passport"
 import refresh from "passport-oauth2-refresh"
 import jwt from "jsonwebtoken"
 import * as Sentry from "@sentry/node"
+import type { Request } from "express"
 import { decrypt } from "./crypto"
 import User from "../../models/user"
 import config from "../../config"
@@ -175,6 +176,19 @@ const refreshToken = async (jwt) => {
 // Shared options for Express response.cookie()
 const cookieOptions = { sameSite: "Lax" }
 
+// Obtain client IP address from request, considering possible proxies
+function getClientIp(req: Request): string | undefined {
+  const forwardedForHeader = req.headers["x-forwarded-for"]
+  if (forwardedForHeader) {
+    const ips = Array.isArray(forwardedForHeader)
+      ? forwardedForHeader
+      : forwardedForHeader.split(",")
+    const clientIp = ips[0].trim()
+    return clientIp
+  }
+  return req.socket.remoteAddress || undefined
+}
+
 // attach user obj to request based on jwt
 // if user does not exist, continue
 export const authenticate = (req, res, next) => {
@@ -192,7 +206,7 @@ export const authenticate = (req, res, next) => {
         if (user) {
           Sentry.setUser({
             id: user.id,
-            ip_address: req.headers["x-forwarded-for"] as string,
+            ip_address: getClientIp(req),
           })
         }
         Sentry.setContext("request_headers", {