Move Rack::MiniProfiler authorization to initializer

fs · Oct 14, 2015 · 5c17376 · 5c17376
1 parent 6fbe320
commit 5c17376
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 18 deletions.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -1,7 +1,6 @@
 class ApplicationController < ActionController::Base
   include Authentication
   include Authorization
-  include MiniProfilerAuthorization
 
   protect_from_forgery with: :exception
   responders :flash

diff --git a/app/controllers/concerns/mini_profiler_authorization.rb b/app/controllers/concerns/mini_profiler_authorization.rb
diff --git a/config/initializers/mini_profiler.rb b/config/initializers/mini_profiler.rb
@@ -1 +1,8 @@
+mini_profiler_ip_whitelist = ENV.fetch("MINI_PROFILER_IP_WHITELIST",  "").split(",")
+
+Rack::MiniProfiler.config.pre_authorize_cb = lambda { |env|
+  request = Rack::Request.new(env)
+  mini_profiler_ip_whitelist.include?(request.ip)
+}
+
 Rack::MiniProfiler.config.storage = Rack::MiniProfiler::MemoryStore