fix: trust docker gateway IP for reverse proxy auth

2026-02-27 23:48:34 +08:00
parent 3888a57642
commit a0354c335b
4 changed files with 26 additions and 4 deletions
@@ -117,7 +117,8 @@ def _classify(method, path, status, user):
@router.get("/openclaw-token")
 def openclaw_token(request: Request):
    ip = request.client.host
-    if ip in ("127.0.0.1", "::1"):
+    import config
+    if config.is_trusted_proxy(ip):
        forwarded = request.headers.get("x-forwarded-for", "").split(",")[0].strip()
        if forwarded:
            ip = forwarded