Merge pull request #943 from MuckRock/api-headers

Add headers to tell the API who we are
MuckRock · Dec 4, 2024 · 6eee860 · 6eee860
2 parents c4d6034 + 1126df7
commit 6eee860
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/hooks.server.ts b/src/hooks.server.ts
@@ -22,7 +22,16 @@ export async function handleFetch({ event, request, fetch }) {
   if (request.url.startsWith(DC_BASE)) {
     // handle docker issues
     event.url.protocol = "https";
+
+    // pass through session cookie
     request.headers.append("cookie", event.request.headers.get("cookie") ?? "");
+
+    // tell the API who we are
+    request.headers.append("x-forwarded-for", event.getClientAddress());
+    request.headers.set(
+      "x-bypass-rate-limit",
+      env.BYPASS_RATE_LIMIT_SECRET ?? "",
+    );
   }
 
   return fetch(request);