ecrs-auth-core 1.0.76 → 1.0.79

package/dist/auth.controller.d.ts

@@ -42,7 +42,7 @@ export declare class AuthController {
      */
     private parseUserAgent;
     /**
-     * Extract client IP from request
+     * Extract client IP from request and clean IPv6-mapped IPv4 format
      * Priority:
      * 1. X-Forwarded-For header (proxy)
      * 2. X-Real-IP header (nginx)

package/dist/auth.controller.js

@@ -128,7 +128,7 @@ let AuthController = class AuthController {
         return { browser, os, deviceType };
     }
     /**
-     * Extract client IP from request
+     * Extract client IP from request and clean IPv6-mapped IPv4 format
      * Priority:
      * 1. X-Forwarded-For header (proxy)
      * 2. X-Real-IP header (nginx)
@@ -137,36 +137,39 @@ let AuthController = class AuthController {
      * 5. socket.remoteAddress (direct connection)
      */
     getClientIp(request) {
+        let ip = '';
         // Check X-Forwarded-For header (most common with proxies)
+        console.log('Headers:', request.headers);
         const xForwardedFor = request.headers['x-forwarded-for'];
-        console.log('X-Forwarded-For header:', xForwardedFor);
-        console.log('Request IP:', request.ip);
-        console.log('Socket Remote Address:', request.socket.remoteAddress);
-        console.log('X-Real-IP header:', request.headers['x-real-ip']);
-        console.log('CF-Connecting-IP header:', request.headers['cf-connecting-ip']);
         if (xForwardedFor) {
             const ips = Array.isArray(xForwardedFor)
                 ? xForwardedFor
                 : xForwardedFor.split(',');
-            return ips[0].trim();
+            ip = ips[0].trim();
         }
         // Check X-Real-IP header (nginx)
-        const xRealIp = request.headers['x-real-ip'];
-        if (xRealIp) {
-            return Array.isArray(xRealIp) ? xRealIp[0] : xRealIp;
+        else if (request.headers['x-real-ip']) {
+            const xRealIp = request.headers['x-real-ip'];
+            ip = Array.isArray(xRealIp) ? xRealIp[0] : xRealIp;
         }
         // Check CF-Connecting-IP (Cloudflare)
-        const cfIp = request.headers['cf-connecting-ip'];
-        if (cfIp) {
-            return Array.isArray(cfIp) ? cfIp[0] : cfIp;
+        else if (request.headers['cf-connecting-ip']) {
+            const cfIp = request.headers['cf-connecting-ip'];
+            ip = Array.isArray(cfIp) ? cfIp[0] : cfIp;
         }
         // Use Express native request.ip (handles proxies if trust proxy is set)
-        if (request.ip) {
-            return request.ip;
+        else if (request.ip) {
+            ip = request.ip;
         }
         // Fallback to socket remote address
-        const socketIp = (request.socket.remoteAddress || '').replace(/^.*:/, '');
-        return socketIp || 'unknown';
+        else if (request.socket.remoteAddress) {
+            ip = request.socket.remoteAddress;
+        }
+        // Clean IPv6-mapped IPv4 format (::ffff:192.168.0.166 -> 192.168.0.166)
+        if (ip.startsWith('::ffff:')) {
+            ip = ip.substring(7);
+        }
+        return ip || 'Unknown';
     }
 };
 exports.AuthController = AuthController;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ecrs-auth-core",
-  "version": "1.0.76",
+  "version": "1.0.79",
   "description": "Centralized authentication and authorization module for ECRS apps",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",