@gradebook/trusted-request
Express middleware to limit requests to trusted IPs
Usage
import express from 'express';
import {allowTrustedIps} from '@gradebook/trusted-request';
const onlyTrustedIps = allowTrustedIps({
trustProxy: true,
trustedIps: ['127.0.0.1', '192.168.124.131'] // Only allow requests from loopback and (e.g.) the parent node
});
const app = express();
app.use('/api', apiRouter);
// trusted-request DOES NOT handle authentication or authorization
app.use('/admin', onlyTrustedIps, user.isAuthenticated, adminRouter);API Reference
import {allowTrustedIps, TrustedRequestError} from '@gradebook/trusted-request';If a request is not trusted, trustedRequest will call next(new TrustedRequestError).