XForwardedMiddleware

class safir.middleware.x_forwarded.XForwardedMiddleware(app: FastAPI, *, proxies: Optional[List[_BaseNetwork]] = None)

Bases: BaseHTTPMiddleware

Middleware to update the request based on X-Forwarded-For.

The remote IP address will be replaced with the right-most IP address in X-Forwarded-For that is not contained within one of the trusted proxy networks.

If X-Forwarded-For is found and X-Forwarded-Proto is also present, the corresponding entry of X-Forwarded-Proto is used to replace the scheme in the request scope. If X-Forwarded-Proto only has one entry (ingress-nginx has this behavior), that one entry will become the new scheme in the request scope.

The contents of X-Forwarded-Host will be stored as forwarded_host in the request state if it and X-Forwarded-For are present. Normally this is not needed since NGINX will pass the original Host header without modification.

Parameters:

proxies (List[ipaddress._BaseNetwork], optional) – The networks of the trusted proxies. If not specified, defaults to the empty list, which means only the immediately upstream proxy will be trusted.

Methods Summary

dispatch(request, call_next)

Middleware to update the request based on X-Forwarded-For.

Methods Documentation

async dispatch(request: Request, call_next: Callable[[Request], Awaitable[Response]]) → Response

Middleware to update the request based on X-Forwarded-For.

Parameters:

• request (fastapi.Request) – The incoming request.

• call_next (typing.Callable) – The next step in the processing stack.

Returns:

response – The response with additional information about proxy headers.

Return type:

fastapi.Response