nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-04-06 13:38:13 -05:00
Code

GetRequestInfo on ban

Browse Source
This commit is contained in:
Kyle Spearrin 2017-11-29 08:42:29 -05:00
parent a1cb980bac
commit cdddffc977
1 changed files with 12 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
src/Core/Utilities/CustomIpRateLimitMiddleware.cs
View File

@ -60,7 +60,7 @@ namespace Bit.Core.Utilities
if(blockedCount > 10)
{
_blockIpService.BlockIpAsync(identity.ClientIp, false);
_logger.LogInformation($"Blocked {identity.ClientIp} with token {GetToken(httpContext.Request)}");
_logger.LogInformation($"Blocked {identity.ClientIp}. Request Info: {GetRequestInfo(httpContext)}");
}
else
{
@ -69,30 +69,25 @@ namespace Bit.Core.Utilities
}
}
private string GetToken(HttpRequest request)
private string GetRequestInfo(HttpContext httpContext)
{
if(request == null)
if(httpContext == null || httpContext.Request == null)
{
return null;
}
var authorization = request.Headers["Authorization"].FirstOrDefault();
if(string.IsNullOrWhiteSpace(authorization))
var s = string.Empty;
foreach(var header in httpContext.Request.Headers)
{
// Bearer token could exist in the 'Content-Language' header on clients that want to avoid pre-flights.
var languageAuth = request.Headers["Content-Language"].FirstOrDefault();
if(string.IsNullOrWhiteSpace(languageAuth) ||
!languageAuth.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
{
return request.Query["access_token"].FirstOrDefault();
}
else
{
authorization = languageAuth.Split(',')[0];
}
s += $"H_{header.Key}: {header.Value} | ";
}
return authorization;
foreach(var query in httpContext.Request.Query)
{
s += $"Q_{query.Key}: {query.Value} | ";
}
return s;
}
}
}