Skip to content

Porting: [ADD] deltatech_rpc_audit: log XML-RPC/JSON-RPC calls with real client IP (from 18.0) - #2576

Open
github-actions[bot] wants to merge 1 commit into
19.0from
19.0-port-18.0-add-rpc-audit
Open

Porting: [ADD] deltatech_rpc_audit: log XML-RPC/JSON-RPC calls with real client IP (from 18.0)#2576
github-actions[bot] wants to merge 1 commit into
19.0from
19.0-port-18.0-add-rpc-audit

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Automat portat din PR #2575 fuzionat în 18.0.

NOTĂ: PR creat automat; necesită review și testare.

…t IP

Override the core RPC controller to log XML-RPC (/xmlrpc, /xmlrpc/2) and
JSON-RPC (/jsonrpc) calls under the logger odoo.rpc.audit.

The real client IP is read from the X-Forwarded-For header so calls are not
all attributed to the reverse-proxy IP (e.g. 10.0.0.2), independently of the
proxy_mode option. Optional ignore list from the config-file key
rpc_audit_ignore_ips (self-hosted) and/or the System Parameter
rpc_audit.ignore_ips (Odoo.sh), merged and cached 60s.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant