The whitelist cannot use X-forwarded-for or X-real-ip to identify whether a user is on the whitelist.

[vimers01]

How to use the http header X-forword-for or X-real-ip for white names to identify the whitelist, otherwise, when there is a proxy server nginx in front of my webhook, the whitelist cannot identify the real user IP .

[moorereason]

webhook doesn't currently support that. You'll have to do your filtering in nginx for now.

[moorereason]

Proposed Solution

Add a new cidr match type and deprecate the ip-whitelist match type.

"match":
{
  "type": "cidr",
  "value": "1.2.3.0/24",
  "parameter":
  {
    "source": "request",
    "name": "remote-addr"
  }
}

"match":
{
  "type": "cidr",
  "value": "2001:db8::/32",
  "parameter":
  {
    "source": "header",
    "name": "X-forwarded-for"
  }
}

[vimers01]

Change another method to achieve the whitelist, thank you very much!

[0x5c0f]

I also encountered this issue. Has the new version already fixed it?