TRKJ/EdgeAdmin
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeAdmin.git synced 2025-11-17 06:00:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

安全设置检查IP时同时也检查直接连接管理平台的上游IP

Browse Source
This commit is contained in:
刘祥超
2021-08-11 10:01:23 +08:00
parent a39eb80214
commit 7afe1e0a30
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/web/helpers/user_must_auth.go
View File

@@ -6,6 +6,7 @@ import (
"github.com/TeaOSLab/EdgeAdmin/internal/setup" "github.com/TeaOSLab/EdgeAdmin/internal/setup"
"github.com/iwind/TeaGo/actions" "github.com/iwind/TeaGo/actions"
"github.com/iwind/TeaGo/maps" "github.com/iwind/TeaGo/maps"
"net"
"net/http" "net/http"
"reflect" "reflect"
"strings" "strings"
@@ -63,6 +64,11 @@ func (this *userMustAuth) BeforeAction(actionPtr actions.ActionWrapper, paramNam
action.ResponseWriter.WriteHeader(http.StatusForbidden) action.ResponseWriter.WriteHeader(http.StatusForbidden)
return false return false
} }
remoteAddr, _, _ := net.SplitHostPort(action.Request.RemoteAddr)
if len(remoteAddr) > 0 && remoteAddr != action.RequestRemoteIP() && !checkIP(securityConfig, remoteAddr) {
action.ResponseWriter.WriteHeader(http.StatusForbidden)
return false
}
// 检查系统是否已经配置过 // 检查系统是否已经配置过
if !setup.IsConfigured() { if !setup.IsConfigured() {

6
internal/web/helpers/user_should_auth.go
View File

@@ -5,6 +5,7 @@ import (
teaconst "github.com/TeaOSLab/EdgeAdmin/internal/const" teaconst "github.com/TeaOSLab/EdgeAdmin/internal/const"
"github.com/TeaOSLab/EdgeAdmin/internal/utils/numberutils" "github.com/TeaOSLab/EdgeAdmin/internal/utils/numberutils"
"github.com/iwind/TeaGo/actions" "github.com/iwind/TeaGo/actions"
"net"
"net/http" "net/http"
) )
@@ -35,6 +36,11 @@ func (this *UserShouldAuth) BeforeAction(actionPtr actions.ActionWrapper, paramN
action.ResponseWriter.WriteHeader(http.StatusForbidden) action.ResponseWriter.WriteHeader(http.StatusForbidden)
return false return false
} }
remoteAddr, _, _ := net.SplitHostPort(action.Request.RemoteAddr)
if len(remoteAddr) > 0 && remoteAddr != action.RequestRemoteIP() && !checkIP(securityConfig, remoteAddr) {
action.ResponseWriter.WriteHeader(http.StatusForbidden)
return false
}
return true return true
} }