added extra IP validation to get telegram requests via proxy

Mirmuxsin · Dec 21, 2023 · 84e78a6 · 84e78a6
1 parent 98824f8
commit 84e78a6
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/src/Types/Handler.php b/src/Types/Handler.php
@@ -51,7 +51,12 @@ public static function get(): array
      * @return array
      * @throws Exception
      */
-    private static function filterUpdate (Request $update) {
+    private static function filterUpdate (Request $update)
+    {
+
+        if (IpUtils::checkIp($update->ip(), config('laragram.trusted_ips'))) {
+            return $update->all();
+        }
 
         if (App::environment('local') && IpUtils::checkIp($update->ip(), self::$localIpNets)) {
             return $update->all();

diff --git a/src/config/laragram.php b/src/config/laragram.php
@@ -2,5 +2,10 @@
 
 return [
     'token' => env('TELEGRAM_BOT_TOKEN'),
-    'url' => '/api/bot'
-];
+    'url' => '/api/bot',
+
+    // Trusted Telegram IP addresses or proxies
+    'trusted_ips' => [
+//        '127.0.0.1/32'
+    ],
+];