diff --git a/Source/ProofOfConcept/Program.cs b/Source/ProofOfConcept/Program.cs index 273fcbc..eaac161 100644 --- a/Source/ProofOfConcept/Program.cs +++ b/Source/ProofOfConcept/Program.cs @@ -39,6 +39,20 @@ builder.Services.AddHttpClient().AddHttpClient("InsecureClient") HttpClientHandler.DangerousAcceptAnyServerCertificateValidator }); +// If you know your proxy IP(s), specify them for security. +builder.Services.Configure(options => +{ + options.ForwardedHeaders = + ForwardedHeaders.XForwardedFor | + ForwardedHeaders.XForwardedProto | + ForwardedHeaders.XForwardedHost; + + // Trust specific proxy or network: + options.KnownProxies.Clear(); + options.KnownNetworks.Clear(); + options.ForwardLimit = null; // but prefer being explicit when possible +}); + builder.Services .AddAuthentication(o => { diff --git a/Source/ProofOfConcept/Services/MessageProcessor.cs b/Source/ProofOfConcept/Services/MessageProcessor.cs index d0eadb9..f4fb60f 100644 --- a/Source/ProofOfConcept/Services/MessageProcessor.cs +++ b/Source/ProofOfConcept/Services/MessageProcessor.cs @@ -156,7 +156,7 @@ public class MessageProcessorConfiguration public Dictionary VinNotifications { get; set; } = new Dictionary() { { "5YJ3E7EB7KF291652", "u2ouaqqu5gd9f1bq3rmrtwriumaffu"}, /*Zoli*/ - { "LRW3E7EK4NC482668", "udbz5g2hi24m4wcanx44qqkwf7r1c7" } + { "LRW3E7EK4NC482668", "udbz5g2hi24m4wcanx44qqkwf7r1c7" /*Nagy Balázs*/ } }; }