Add headers to tell the API who we are

MuckRock · Dec 4, 2024 · d085bc0 · d085bc0
1 parent fbf37a5
commit d085bc0
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/hooks.server.ts b/src/hooks.server.ts
@@ -22,7 +22,16 @@ export async function handleFetch({ event, request, fetch }) {
   if (request.url.startsWith(DC_BASE)) {
     // handle docker issues
     event.url.protocol = "https";
+
+    // pass through session cookie
     request.headers.append("cookie", event.request.headers.get("cookie") ?? "");
+
+    // tell the API who we are
+    request.headers.append("x-real-ip", event.getClientAddress());
+    request.headers.set(
+      "x-bypass-rate-limit",
+      env.BYPASS_RATE_LIMIT_SECRET ?? "",
+    );
   }
 
   return fetch(request);