fix(auth): use Cloudflare client IP for authentication rate limits

This commit is contained in:
Andras Bacsai
2026-08-26 17:25:28 +02:00
parent 9412566d68
commit bf20c8b287
7 changed files with 84 additions and 4 deletions
+14
View File
@@ -0,0 +1,14 @@
<?php
use Illuminate\Http\Request;
function auth_rate_limit_ip(Request $request): string
{
$cloudflareIp = $request->header('CF-Connecting-IP');
if (isCloud() && is_string($cloudflareIp) && filter_var($cloudflareIp, FILTER_VALIDATE_IP) !== false) {
return $cloudflareIp;
}
return (string) $request->ip();
}