fix(ip): Set x-forwarded-for header from gql to auth-server

mozilla · Jun 7, 2023 · 92a84a0 · 92a84a0
1 parent 0612880
commit 92a84a0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/packages/fxa-graphql-api/src/decorators.ts b/packages/fxa-graphql-api/src/decorators.ts
@@ -45,6 +45,13 @@ export const GqlXHeaders = createParamDecorator(
     // We don't need to propagate the authorization token because
     // it needs to be updated to originate from gql server.
     delete headers['authorization'];
+
+    // Set the x-forwarded-for header since the auth-server will use this
+    // to determine client geolocation
+    if (ctx.req?.ip) {
+     headers['x-forwarded-for'] = ctx.req?.ip;
+    }
+
     return new Headers(headers);
   }
 );