Projet

Général

Profil

0001-middleware-collect-IP-adresses-only-for-non-empty-se.patch

Benjamin Dauvergne, 11 juin 2018 11:11

Télécharger (1,25 ko)

Voir les différences: 

Subject: [PATCH] middleware: collect IP adresses only for non-empty sessions
 (fixes #24419)


 src/authentic2/middleware.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)
src/authentic2/middleware.py
89 89 
            request.exception = exception
90 90 

  		




  91
  91
  
    
class CollectIPMiddleware(object):

  		




  92
  
  
    
    def process_request(self, request):

  		




  
  92
  
    
    def process_response(self, request, response):

  		




  
  93
  
    
        # only collect IP if session is used

  		




  
  94
  
    
        if request.session.is_empty():

  		




  
  95
  
    
            return response

  		




  
  96
  
    

  		




  93
  97
  
    
        ips = set(request.session.setdefault('ips', []))

  		




  94
  98
  
    
        ip = request.META.get('REMOTE_ADDR', None)

  		




  95
  99
  
    
        if ip and ip not in ips:

  		




  96
  100
  
    
            ips.add(ip)

  		




  97
  101
  
    
            request.session['ips'] = list(ips)

  		




  98
  102
  
    
            request.session.modified = True

  		




  
  103
  
    
        return response

  		




  99
  104
  
    

  		




  100
  105
  
    
class OpenedSessionCookieMiddleware(object):

  		




  101
  106
  
    
    def process_response(self, request, response):

  		




  102
  
  
    
-