Download the PHP package ge-tracker/laravel-vapor-trusted-proxies without Composer
On this page you can find all versions of the php package ge-tracker/laravel-vapor-trusted-proxies. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download ge-tracker/laravel-vapor-trusted-proxies
More information about ge-tracker/laravel-vapor-trusted-proxies
Files in ge-tracker/laravel-vapor-trusted-proxies
Package laravel-vapor-trusted-proxies
Short Description Build a dynamic list of trusted proxies for use with Laravel Vapor
License MIT
Homepage https://github.com/ge-tracker/laravel-vapor-trusted-proxies
Informations about the package laravel-vapor-trusted-proxies
Laravel Vapor Trusted Proxies
This package was created due to request()->ip()
always returning 127.0.0.1
on Laravel Vapor. There are several fixes online that trust all proxy servers. These solutions may be suitable for basic applications, however, these changes will allow any user to send the X-FORWARDED-FOR
header to spoof their originating IP address.
Due to the dynamic nature of Laravel Vapor, it becomes a challenge to set the trusted proxies for your Laravel application. If you rely on the IP address of the user being valid, then this package is for you!
Version Compatibility
Laravel 9.0 introduced changes to the default TrustedProxies
middleware, and the fideloper/proxy package is no longer required, as the functionality is included with Laravel. I'm not actively using Vapor and am not sure whether this package is still required, but I have gone ahead and updated the requirements and pushed the v2.0
release, which drops support for earlier Laravel versions.
Laravel | Package Version |
---|---|
^9.0 and up |
^2.0 |
<= 9.0 |
^1.0 |
Installation
You can install the package via composer:
Next, you must edit your app\Http\Middleware\TrustProxies.php
middleware and modify an import to use the middleware provided by this package:
The package will then work out-of-the-box to dynamically fetch the proxy servers used by your current Vapor's deployment.
Testing
Changelog
Please see CHANGELOG for more information what has changed recently.
Contributing
Please see CONTRIBUTING for details.
Security
If you discover any security related issues, please email [email protected] instead of using the issue tracker.
Credits
- GE Tracker
- All Contributors
License
The MIT License (MIT). Please see License File for more information.
All versions of laravel-vapor-trusted-proxies with dependencies
illuminate/http Version ^9.0 || ^10.0 || ^11.0
illuminate/support Version ^9.0 || ^10.0 || ^11.0