Added Laravel project

Laravel/vendor/fideloper/proxy/src/TrustProxies.php

@@ -0,0 +1,181 @@
+<?php
+
+namespace Fideloper\Proxy;
+
+use Closure;
+use Illuminate\Contracts\Config\Repository;
+
+class TrustProxies
+{
+    /**
+     * The config repository instance.
+     *
+     * @var \Illuminate\Contracts\Config\Repository
+     */
+    protected $config;
+
+    /**
+     * The trusted proxies for the application.
+     *
+     * @var array
+     */
+    protected $proxies;
+
+    /**
+     * The proxy header mappings.
+     *
+     * @var array
+     */
+    protected $headers;
+
+    /**
+     * Create a new trusted proxies middleware instance.
+     *
+     * @param \Illuminate\Contracts\Config\Repository $config
+     */
+    public function __construct(Repository $config)
+    {
+        $this->config = $config;
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @param \Closure                 $next
+     *
+     * @throws \Symfony\Component\HttpKernel\Exception\HttpException
+     *
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        $this->setTrustedProxyHeaderNames($request);
+        $this->setTrustedProxyIpAddresses($request);
+
+        return $next($request);
+    }
+
+    /**
+     * Sets the trusted proxies on the request to the value of trustedproxy.proxies
+     *
+     * @param \Illuminate\Http\Request $request
+     */
+    protected function setTrustedProxyIpAddresses($request)
+    {
+        $trustedIps = $this->proxies ?: $this->config->get('trustedproxy.proxies');
+
+        // We only trust specific IP addresses
+        if (is_array($trustedIps)) {
+            return $this->setTrustedProxyIpAddressesToSpecificIps($request, $trustedIps);
+        }
+
+        // We trust any IP address that calls us, but not proxies further
+        // up the forwarding chain.
+        // TODO: Determine if this should only trust the first IP address
+        //       Currently it trusts the entire chain (array of IPs),
+        //       potentially making the "**" convention redundant.
+        if ($trustedIps === '*') {
+            return $this->setTrustedProxyIpAddressesToTheCallingIp($request);
+        }
+
+        // We trust all proxies. Those that call us, and those that are
+        // further up the calling chain (e.g., where the X-FORWARDED-FOR
+        // header has multiple IP addresses listed);
+        if ($trustedIps === '**') {
+            return $this->setTrustedProxyIpAddressesToAllIps($request);
+        }
+    }
+
+    /**
+     * We specify the IP addresses to trust explicitly.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @param array                    $trustedIps
+     */
+    private function setTrustedProxyIpAddressesToSpecificIps($request, $trustedIps)
+    {
+        $request->setTrustedProxies((array) $trustedIps, $this->getTrustedHeaderSet());
+    }
+
+    /**
+     * We set the trusted proxy to be the first IP addresses received.
+     *
+     * @param \Illuminate\Http\Request $request
+     */
+    private function setTrustedProxyIpAddressesToTheCallingIp($request)
+    {
+        $request->setTrustedProxies($request->getClientIps(), $this->getTrustedHeaderSet());
+    }
+
+    /**
+     * Trust all IP Addresses.
+     *
+     * @param \Illuminate\Http\Request $request
+     */
+    private function setTrustedProxyIpAddressesToAllIps($request)
+    {
+        // 0.0.0.0/0 is the CIDR for all ipv4 addresses
+        // 2000:0:0:0:0:0:0:0/3 is the CIDR for all ipv6 addresses currently
+        // allocated http://www.iana.org/assignments/ipv6-unicast-address-assignments/ipv6-unicast-address-assignments.xhtml
+        $request->setTrustedProxies(['0.0.0.0/0', '2000:0:0:0:0:0:0:0/3'], $this->getTrustedHeaderSet());
+    }
+
+    /**
+     * Set the trusted header names based on the content of trustedproxy.headers.
+     *
+     * Note: Depreciated in Symfony 3.3+, but available for backwards compatibility.
+     *
+     * @depreciated
+     *
+     * @param \Illuminate\Http\Request $request
+     */
+    protected function setTrustedProxyHeaderNames($request)
+    {
+        $trustedHeaderNames = $this->getTrustedHeaderNames();
+
+        if(!is_array($trustedHeaderNames)) { return; } // Leave the defaults
+
+        foreach ($trustedHeaderNames as $headerKey => $headerName) {
+            $request->setTrustedHeaderName($headerKey, $headerName);
+        }
+    }
+
+    /**
+     * Retrieve trusted header names, falling back to defaults if config not set.
+     *
+     * @return array
+     */
+    protected function getTrustedHeaderNames()
+    {
+        return $this->headers ?: $this->config->get('trustedproxy.headers');
+    }
+
+    /**
+     * Construct bit field integer of the header set that setTrustedProxies() expects.
+     *
+     * @return int
+     */
+    protected function getTrustedHeaderSet()
+    {
+        $trustedHeaderNames = $this->getTrustedHeaderNames();
+        $headerKeys = array_keys($this->getTrustedHeaderNames());
+
+        return array_reduce($headerKeys, function ($set, $key) use ($trustedHeaderNames) {
+            // PHP 7+ gives a warning if non-numeric value is used
+            // resulting in a thrown ErrorException within Laravel
+            // This error occurs with Symfony < 3.3, PHP7+
+            if(! is_numeric($key)) {
+                return $set;
+            }
+
+            // If the header value is null, it is a distrusted header,
+            // so we will ignore it and move on.
+            if (is_null($trustedHeaderNames[$key])) {
+                return $set;
+            }
+
+            return $set | $key;
+        }, 0);
+    }
+}

Laravel/vendor/fideloper/proxy/src/TrustedProxyServiceProvider.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace Fideloper\Proxy;
+
+use Illuminate\Foundation\Application as LaravelApplication;
+use Illuminate\Support\ServiceProvider;
+use Laravel\Lumen\Application as LumenApplication;
+
+class TrustedProxyServiceProvider extends ServiceProvider
+{
+    /**
+     * Boot the service provider.
+     *
+     * @return void
+     */
+    public function boot()
+    {
+        $source = realpath(__DIR__.'/../config/trustedproxy.php');
+
+        if ($this->app instanceof LaravelApplication && $this->app->runningInConsole()) {
+            $this->publishes([$source => config_path('trustedproxy.php')]);
+        } elseif ($this->app instanceof LumenApplication) {
+            $this->app->configure('trustedproxy');
+        }
+
+        $this->mergeConfigFrom($source, 'trustedproxy');
+    }
+
+    /**
+     * Register the service provider.
+     *
+     * @return void
+     */
+    public function register()
+    {
+        //
+    }
+}