trust proxy를 통한 real ip 추출 (12.05)

`trust proxy`를 통한 real ip 추출 (12.05)

src/common/decorators/real-ip.decorator.ts

@@ -0,0 +1,14 @@
+import { createParamDecorator } from "@nestjs/common";
+
+const RealIp = createParamDecorator((_, ctx) => {
+  const req = ctx.switchToHttp().getRequest();
+  const ip =
+    (req.ips.length ? req.ips[0] : req.ip) ||
+    req.headers["x-forwarded-for"] ||
+    req.headers["x-real-ip"] ||
+    "0.0.0.0";
+
+  return ip;
+});
+
+export { RealIp };

src/main.ts

@@ -1,13 +1,14 @@
 import { ValidationPipe } from "@nestjs/common";
 import { ConfigService } from "@nestjs/config";
 import { NestFactory } from "@nestjs/core";
+import { NestExpressApplication } from "@nestjs/platform-express";
 
 import * as cookieParser from "cookie-parser";
 
 import { AppModule } from "@/app.module";
 
 async function bootstrap() {
-  const app = await NestFactory.create(AppModule);
+  const app = await NestFactory.create<NestExpressApplication>(AppModule);
 
   app.setGlobalPrefix("api");
 
@@ -16,6 +17,8 @@ async function bootstrap() {
   const PORT = configService.get("PORT");
   const HOST = configService.get("HOST");
 
+  app.set("trust proxy", 1);
+
   app.use(cookieParser());
   app.enableCors({
     origin: HOST,

src/routes/post/post.controller.ts

@@ -1,7 +1,7 @@
 import { Body, Controller, Delete, Get, Param, Patch, Post, Put, Query } from "@nestjs/common";
 
 import { Public } from "@/common/decorators";
-import { RealIp } from "@/common/decorators/RealIp.decorator";
+import { RealIp } from "@/common/decorators/real-ip.decorator";
 import { CreatePostDto } from "@/routes/post/dto/create-post.dto";
 import { GetPostsDto } from "@/routes/post/dto/get-posts.dto";
 import { UpdatePostDto } from "@/routes/post/dto/update-post.dto";