Repository: directus/directus
File: api/src/utils/get-ip-from-req.ts (TypeScript)

Code before:

// https://github.com/expressjs/express/blob/main/lib/utils.js#L192
function getTrustValue(trust: boolean | number | proxyAddr.Address | proxyAddr.Address[]) {
	if (typeof trust === 'boolean') {
		// Support plain true/false
		const r = trust;
		return (_addr: string, _i: number) => r;
	} else if (typeof trust === 'number') {
		// Support trusting hop count
		const r = trust;
		return (_addr: string, i: number) => i < r;
	} else if (typeof trust === 'string') {
		// Support comma-separated values
		trust = trust.split(',').map((v) => v.trim());
	}

	return proxyAddr.compile(trust || []);
}

export function getIPFromReq(req: IncomingMessage | Request): string | null {
	const env = useEnv();
	const logger = useLogger();

	let ip = 'ip' in req ? req.ip : proxyAddr(req, getTrustValue(env['IP_TRUST_PROXY'] as any));

	if (env['IP_CUSTOM_HEADER']) {
		const customIPHeaderName = (env['IP_CUSTOM_HEADER'] as string).toLowerCase();

		// All req.headers are auto lower-cased
		let customIPHeaderValue = req.headers[customIPHeaderName] as unknown;

		// https://github.com/expressjs/express/blob/main/lib/request.js#L63
		if (customIPHeaderName === 'referer' || customIPHeaderName === 'referrer') {
			customIPHeaderValue = req.headers['referrer'] || req.headers['referer'];
		}

		if (typeof customIPHeaderValue === 'string' && isIP(customIPHeaderValue) !== 0) {
			ip = customIPHeaderValue;
		} else {
			logger.warn(`Custom IP header didn't return valid IP address: ${JSON.stringify(customIPHeaderValue)}`);
		}
	}

	// IP addresses starting with ::ffff: are IPv4 addresses in IPv6 format. We can strip the prefix to get back to IPv4
	return ip?.startsWith('::ffff:') ? ip.substring(7) : ip ?? null;
}


Review comment (suggestion):

```suggestion
	let ip = req['ip'] ?? proxyAddr(req, getTrustValue(env['IP_TRUST_PROXY'] as any));
```

Code after:

/**
 * Generate the trusted ip list
 *
 * Adapted to have feature parity with the express equivalent https://github.com/expressjs/express/blob/9f4dbe3a1332cd883069ba9b73a9eed99234cfc7/lib/utils.js#L192
 */
function getTrustValue(trust: boolean | number | proxyAddr.Address | proxyAddr.Address[]) {
	if (typeof trust === 'boolean') {
		// Support plain true/false
		return (_addr: string, _i: number) => trust as boolean;
	} else if (typeof trust === 'number') {
		// Support trusting hop count
		return (_addr: string, i: number) => i < (trust as number);
	} else if (typeof trust === 'string') {
		// Support comma-separated values
		trust = trust.split(',').map((v) => v.trim());
	}

	return proxyAddr.compile(trust || []);
}

export function getIPFromReq(req: IncomingMessage | Request): string | null {
	const env = useEnv();
	const logger = useLogger();

	let ip = 'ip' in req ? req.ip : proxyAddr(req, getTrustValue(env['IP_TRUST_PROXY'] as any));

	if (env['IP_CUSTOM_HEADER']) {
		const customIPHeaderName = (env['IP_CUSTOM_HEADER'] as string).toLowerCase();

		// All req.headers are auto lower-cased
		let customIPHeaderValue = req.headers[customIPHeaderName] as unknown;

		// // Done to have feature parity with https://github.com/expressjs/express/blob/9f4dbe3a1332cd883069ba9b73a9eed99234cfc7/lib/request.js#L63
		if (customIPHeaderName === 'referer' || customIPHeaderName === 'referrer') {
			customIPHeaderValue = req.headers['referrer'] || req.headers['referer'];
		}

		if (typeof customIPHeaderValue === 'string' && isIP(customIPHeaderValue) !== 0) {
			ip = customIPHeaderValue;
		} else {
			logger.warn(`Custom IP header didn't return valid IP address: ${JSON.stringify(customIPHeaderValue)}`);
		}
	}

	// IP addresses starting with ::ffff: are IPv4 addresses in IPv6 format. We can strip the prefix to get back to IPv4
	return ip?.startsWith('::ffff:') ? ip.substring(7) : ip ?? null;
}