fix(api): remote ip for login log

veops · Sep 10, 2024 · de86ea3 · de86ea3
1 parent bf05ea2
commit de86ea3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cmdb-api/api/lib/perm/acl/audit.py b/cmdb-api/api/lib/perm/acl/audit.py
@@ -387,7 +387,8 @@ def add_login_log(cls, username, is_ok, description, _id=None, logout_at=None, i
                        is_ok=is_ok,
                        description=description,
                        logout_at=logout_at,
-                       ip=ip or request.headers.get('X-Real-IP') or request.remote_addr,
+                       ip=(ip or request.headers.get('X-Forwarded-For') or
+                           request.headers.get('X-Real-IP') or request.remote_addr or '').split(',')[0],
                        browser=browser or request.headers.get('User-Agent'),
                        channel=request.values.get('channel', 'web'),
                        )