From 611765d45d6adeda89b49b1f2805a69d01ca4167 Mon Sep 17 00:00:00 2001
From: Philippe Pittoli <karchnu@karchnu.fr>
Date: Thu, 14 Mar 2024 23:19:15 +0100
Subject: [PATCH] Token-handler now uses HTTP headers to know the true origin
 IP address.

---
 tools/token-handler.cr | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/tools/token-handler.cr b/tools/token-handler.cr
index 4a138dc..119edca 100644
--- a/tools/token-handler.cr
+++ b/tools/token-handler.cr
@@ -13,13 +13,8 @@ dnsmanagerd = DNSManager::Client.new
 #dnsmanagerd.login login, pass
 
 server = HTTP::Server.new do |context|
-	pp! context.request.remote_address
-	ip = case remote = context.request.remote_address
-	when Socket::IPAddress
-		remote.address
-	else
-		""
-	end
+	pp! context.request.headers["Host"]
+	ip = context.request.headers["Host"] rescue next
 
 	case context.request.path
 	when /^\/token-update\/(?<token>[a-z0-9-]+)/