Skip to content

fix: get actual client IPs by trusting proxy headers from all IPs

Stan Hu requested to merge sh-client-ip into main

Currently client_ip in the logs just shows the internal IPs since the X-Forwarded-For addresses are not used. For now, trust all proxy headers until https://github.com/encode/uvicorn/pull/1611 provides the ability to use CIDR blocks.

Relates to #68 (closed)

Edited by Stan Hu

Merge request reports