[mirotalksfu] - add IP whitelist middleware

app/src/Server.js

@@ -40,7 +40,7 @@ dependencies: {
  * @license For commercial or closed source, contact us at license.mirotalk@gmail.com or purchase directly via CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-sfu-webrtc-realtime-video-conferences/40769970
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.3.61
+ * @version 1.3.62
  *
  */
 
@@ -68,6 +68,7 @@ const swaggerUi = require('swagger-ui-express');
 const swaggerDocument = yamlJS.load(path.join(__dirname + '/../api/swagger.yaml'));
 const Sentry = require('@sentry/node');
 const { CaptureConsole } = require('@sentry/integrations');
+const restrictAccessByIP = require('./middleware/IpWhitelist.js');
 const packageJson = require('../../package.json');
 
 // Slack API
@@ -205,6 +206,9 @@ function startServer() {
     app.use(bodyParser.urlencoded({ extended: true }));
     app.use(apiBasePath + '/docs', swaggerUi.serve, swaggerUi.setup(swaggerDocument)); // api docs
 
+    // IP Whitelist check ...
+    app.use(restrictAccessByIP);
+
     // Logs requests
     app.use((req, res, next) => {
         log.debug('New request:', {
@@ -502,6 +506,7 @@ function startServer() {
                 node_version: process.versions.node,
                 hostConfig: hostCfg,
                 presenters: config.presenters,
+                middleware: config.middleware,
                 announced_ip: announcedIP,
                 server: host,
                 server_tunnel: tunnel,
@@ -549,6 +554,7 @@ function startServer() {
             node_version: process.versions.node,
             hostConfig: hostCfg,
             presenters: config.presenters,
+            middleware: config.middleware,
             announced_ip: announcedIP,
             server: host,
             api_docs: api_docs,

app/src/config.template.js

@@ -67,6 +67,17 @@ module.exports = {
         ],
         join_first: true, // Set to true for traditional behavior, false to prioritize presenters
     },
+    middleware: {
+        /*
+            Middleware:
+                - IP Whitelist: Access to the instance is restricted to only the specified IP addresses in the allowed list. This feature is disabled by default.
+                - ...
+        */
+        IpWhitelist: {
+            enabled: false,
+            allowed: ['127.0.0.1', '::1'],
+        },
+    },
     console: {
         debug: true,
         colors: true,

app/src/middleware/IpWhitelist.js

@@ -0,0 +1,23 @@
+'use strict';
+
+const config = require('../config');
+const Logger = require('../Logger');
+const log = new Logger('RestrictAccessByIP');
+
+const IpWhitelistEnabled = config.middleware ? config.middleware.IpWhitelist.enabled : false;
+const allowedIPs = config.middleware ? config.middleware.IpWhitelist.allowed : [];
+
+const restrictAccessByIP = (req, res, next) => {
+    if (!IpWhitelistEnabled) return next();
+    //
+    const clientIP = req.headers['x-forwarded-for'] || req.socket.remoteAddress || req.ip;
+    log.debug('Check IP', clientIP);
+    if (allowedIPs.includes(clientIP)) {
+        next();
+    } else {
+        log.info('Forbidden: Access denied from this IP address', { clientIP: clientIP });
+        res.status(403).json({ error: 'Forbidden', message: 'Access denied from this IP address.' });
+    }
+};
+
+module.exports = restrictAccessByIP;

package.json

@@ -1,6 +1,6 @@
 {
     "name": "mirotalksfu",
-    "version": "1.3.61",
+    "version": "1.3.62",
     "description": "WebRTC SFU browser-based video calls",
     "main": "Server.js",
     "scripts": {

public/js/Room.js

@@ -11,7 +11,7 @@ if (location.href.substr(0, 5) !== 'https') location.href = 'https' + location.h
  * @license For commercial or closed source, contact us at license.mirotalk@gmail.com or purchase directly via CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-sfu-webrtc-realtime-video-conferences/40769970
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.3.61
+ * @version 1.3.62
  *
  */
 

public/js/RoomClient.js

@@ -9,7 +9,7 @@
  * @license For commercial or closed source, contact us at license.mirotalk@gmail.com or purchase directly via CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-sfu-webrtc-realtime-video-conferences/40769970
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.3.61
+ * @version 1.3.62
  *
  */