Module: IPWhitelist::Controller

Defined in:
lib/ip_whitelist/controller.rb

Instance Method Summary collapse

Instance Method Details

#check_ip_whitelist ⇒ Object 



3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
 
# File 'lib/ip_whitelist/controller.rb', line 3

def check_ip_whitelist
  if current_user && current_user.respond_to?(:ip_whitelist) && current_user.ip_whitelist.present?
    # Since requests can come through cloudflare, try that IP first.
    ip = IPAddr.new(request.headers["CF-Connecting-IP"] || request.remote_ip)

    return if current_user.ip_whitelist.detect{ |ip_or_range|
      # Check if the IP is equal to the whitelisted IP, or is within the
      # whitelisted IP range.
      (ip_or_range.is_a?(IPAddr) ? ip_or_range : IPAddr.new(ip_or_range)) === ip
    }

    Rails.logger.info("#{current_user.username}'s IP (#{ip}) is not in authorized list (#{current_user.ip_whitelist.join(", " )})")

    if redirect = IPWhitelist.redirect
      redirect_to redirect
    else
      render text: "Not Authorized", status: 401
    end
  end
end