Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(ip)!: Rework priority of IP detection #799

Merged
merged 2 commits into from
May 22, 2024
Merged

fix(ip)!: Rework priority of IP detection #799

merged 2 commits into from
May 22, 2024

Conversation

blaine-arcjet
Copy link
Contributor

@blaine-arcjet blaine-arcjet commented May 21, 2024 •
edited
Loading

Closes #798

This is a breaking change to how we detect IP from headers. I've changed it to prefer IP values on a "request-like" object, such as ip or socket.remoteAddress.

I also prioritized CF-Connecting-IP and Fly-Client-IP over X-Forwarded-For headers but they are only used when actually deployed to Cloudflare or Fly respectively. We'll want to guard other platforms where an environment variable is detectable but I couldn't others in some cursory research.

Additionally, we now iterate the X-Forwarded-For IPs in reverse since the first items are the easiest to spoof. For example, a user can just submit whatever IP address as the first entry in X-Forwarded-For along with their request.

All of the above should be documented via code comments too.

Oh, and I removed the CF-Pseudo-IPv4 header because it will always be wrong since Cloudflare generates a non-public IP address as the translation of the IPv6 so we're preferring CF-Connecting-IPv6 correctly now.

@blaine-arcjet blaine-arcjet requested a review from a team as a code owner May 21, 2024 21:27
@trunk-io Trunk.io
Copy link

trunk-io bot commented May 21, 2024 •
edited
Loading

😎 Merged successfully - details.

@blaine-arcjet blaine-arcjet requested a review from davidmytton May 22, 2024 13:46
@trunk-io trunk-io bot merged commit 1df6291 into main May 22, 2024
20 checks passed
@trunk-io trunk-io bot deleted the phated/ip-detection-changes branch May 22, 2024 14:40
@github-actions github-actions bot mentioned this pull request May 21, 2024
Merged
trunk-io bot pushed a commit that referenced this pull request Jun 10, 2024
@github-actions
chore: Release 1.0.0-alpha.14 (#797)
9fe6927 
🤖 I have created a release *beep* *boop*
---


<details><summary>@arcjet/bun: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/bun-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))
* **dev:** Bump bun-types from 1.1.8 to 1.1.12 ([#853](#853)) ([a42fbd3](a42fbd3))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **docs:** Add live example app to READMEs ([#823](#823)) ([8b1c811](8b1c811))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/env bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/headers bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/ip bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/logger bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * arcjet bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/decorate: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/decorate-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **decorate:** Use console to log instead of Arcjet logger ([#865](#865))

### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### 🧹 Miscellaneous Chores

* **decorate:** Use console to log instead of Arcjet logger ([#865](#865)) ([39bfcfc](39bfcfc))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/protocol bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/sprintf bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/duration: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/duration-v1.0.0-alpha.14) (2024-06-10)


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/env: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/env-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))

### 🚀 New Features

* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/next: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/next-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **docs:** Add live example app to READMEs ([#823](#823)) ([8b1c811](8b1c811))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/env bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/headers bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/ip bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/logger bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * arcjet bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/node: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/node-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **docs:** Add live example app to READMEs ([#823](#823)) ([8b1c811](8b1c811))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/env bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/headers bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/ip bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/logger bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * arcjet bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/runtime: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/runtime-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Create runtime package and remove from SDK ([#871](#871))

### 🚀 New Features

* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/sprintf: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/sprintf-v1.0.0-alpha.14) (2024-06-10)


### 🚀 New Features

* Create sprintf package to replace util.format ([#856](#856)) ([160a16e](160a16e))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/sveltekit: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/sveltekit-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **docs:** Add live example app to READMEs ([#823](#823)) ([8b1c811](8b1c811))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/env bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/headers bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/ip bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/logger bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/runtime bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * arcjet bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/analyze: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/analyze-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887))
* **logger:** Align logger with Pino API ([#858](#858))

### 🚀 New Features

* **logger:** Align logger with Pino API ([#858](#858)) ([1806b94](1806b94)), closes [#822](#822) [#855](#855)


### 🪲 Bug Fixes

* **analyze:** Disable cache during base64 decode ([#838](#838)) ([72fb961](72fb961))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887)) ([d7a698f](d7a698f))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/protocol bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/eslint-config: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/eslint-config-v1.0.0-alpha.14) (2024-06-10)


### 📦 Dependencies

* Bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 ([#918](#918)) ([bbd72a5](bbd72a5))
* Bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.12.0 ([#862](#862)) ([51330b7](51330b7))
* Bump @typescript-eslint/parser from 7.12.0 to 7.13.0 ([#917](#917)) ([cfe0c14](cfe0c14))
* Bump @typescript-eslint/parser from 7.9.0 to 7.12.0 ([#861](#861)) ([eaf8c26](eaf8c26))
* Bump eslint-config-turbo from 1.13.3 to 2.0.3 ([#893](#893)) ([97525af](97525af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
</details>

<details><summary>@arcjet/headers: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/headers-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/ip: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/ip-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* **ip:** Rework priority of IP detection ([#799](#799))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))


### 🪲 Bug Fixes

* **ip:** Rework priority of IP detection ([#799](#799)) ([1df6291](1df6291))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/logger: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/logger-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **logger:** Align logger with Pino API ([#858](#858))
* **logger:** Replace nodejs util import with our sprintf library ([#857](#857))

### 🚀 New Features

* **logger:** Align logger with Pino API ([#858](#858)) ([1806b94](1806b94)), closes [#822](#822) [#855](#855)


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### 🧹 Miscellaneous Chores

* **logger:** Replace nodejs util import with our sprintf library ([#857](#857)) ([edd99a1](edd99a1))
* **logger:** Update description to match implementation ([#907](#907)) ([0840358](0840358))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/sprintf bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/protocol: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/protocol-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **logger:** Align logger with Pino API ([#858](#858))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))

### 🚀 New Features

* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **logger:** Align logger with Pino API ([#858](#858)) ([1806b94](1806b94)), closes [#822](#822) [#855](#855)


### 📦 Dependencies

* Bump @bufbuild/protobuf from 1.9.0 to 1.10.0 ([#847](#847)) ([de8266f](de8266f))
* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/rollup-config: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/rollup-config-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887))

### 📦 Dependencies

* Bump @rollup/plugin-replace from 5.0.5 to 5.0.7 ([#920](#920)) ([176170b](176170b))
* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))


### 🧹 Miscellaneous Chores

* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887)) ([d7a698f](d7a698f))


### Dependencies

* The following workspace dependencies were updated
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>@arcjet/tsconfig: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](https://github.com/arcjet/arcjet-js/compare/v1.0.0-alpha.13...@arcjet/tsconfig-v1.0.0-alpha.14) (2024-06-10)


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
</details>

<details><summary>arcjet: 1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](v1.0.0-alpha.13...arcjet-v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **logger:** Align logger with Pino API ([#858](#858))
* Create runtime package and remove from SDK ([#871](#871))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))

### 🚀 New Features

* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* **logger:** Align logger with Pino API ([#858](#858)) ([1806b94](1806b94)), closes [#822](#822) [#855](#855)
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 📦 Dependencies

* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))


### 📝 Documentation

* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### Dependencies

* The following workspace dependencies were updated
  * dependencies
    * @arcjet/analyze bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/duration bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/headers bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/logger bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/protocol bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/runtime bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
  * devDependencies
    * @arcjet/eslint-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/rollup-config bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
    * @arcjet/tsconfig bumped from 1.0.0-alpha.13 to 1.0.0-alpha.14
</details>

<details><summary>1.0.0-alpha.14</summary>

## [1.0.0-alpha.14](v1.0.0-alpha.13...v1.0.0-alpha.14) (2024-06-10)


### ⚠ BREAKING CHANGES

* Move all environment lookup into separate package ([#897](#897))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896))
* Add fallback IP in each adapter ([#895](#895))
* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887))
* **logger:** Align logger with Pino API ([#858](#858))
* Create runtime package and remove from SDK ([#871](#871))
* **decorate:** Use console to log instead of Arcjet logger ([#865](#865))
* **logger:** Replace nodejs util import with our sprintf library ([#857](#857))
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841))
* Separate `@arcjet/headers` package from core ([#824](#824))
* **ip:** Rework priority of IP detection ([#799](#799))

### 🚀 New Features

* Add fallback IP in each adapter ([#895](#895)) ([0f23cff](0f23cff)), closes [#51](#51) [#885](#885)
* Allow ArcjetContext extension via new argument to core `protect()` ([#841](#841)) ([96bbe94](96bbe94))
* Create runtime package and remove from SDK ([#871](#871)) ([4e9e216](4e9e216))
* Create sprintf package to replace util.format ([#856](#856)) ([160a16e](160a16e))
* **ip:** Allow platform to be specified when looking up IP ([#896](#896)) ([c9f54bb](c9f54bb))
* **logger:** Align logger with Pino API ([#858](#858)) ([1806b94](1806b94)), closes [#822](#822) [#855](#855)
* Move all environment lookup into separate package ([#897](#897)) ([a5bb8ca](a5bb8ca))
* Separate `@arcjet/headers` package from core ([#824](#824)) ([c8364f4](c8364f4))


### 🪲 Bug Fixes

* **analyze:** Disable cache during base64 decode ([#838](#838)) ([72fb961](72fb961))
* **ip:** Rework priority of IP detection ([#799](#799)) ([1df6291](1df6291))


### 📦 Dependencies

* Bump @bufbuild/protobuf from 1.9.0 to 1.10.0 ([#847](#847)) ([de8266f](de8266f))
* Bump @rollup/plugin-replace from 5.0.5 to 5.0.7 ([#920](#920)) ([176170b](176170b))
* Bump @typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 ([#918](#918)) ([bbd72a5](bbd72a5))
* Bump @typescript-eslint/eslint-plugin from 7.9.0 to 7.12.0 ([#862](#862)) ([51330b7](51330b7))
* Bump @typescript-eslint/parser from 7.12.0 to 7.13.0 ([#917](#917)) ([cfe0c14](cfe0c14))
* Bump @typescript-eslint/parser from 7.9.0 to 7.12.0 ([#861](#861)) ([eaf8c26](eaf8c26))
* Bump eslint-config-turbo from 1.13.3 to 2.0.3 ([#893](#893)) ([97525af](97525af))
* **dev:** Bump @rollup/wasm-node from 4.17.2 to 4.18.0 ([#803](#803)) ([e6321af](e6321af))
* **dev:** Bump bun-types from 1.1.8 to 1.1.12 ([#853](#853)) ([a42fbd3](a42fbd3))
* **example:** Bump @types/bun from 1.1.2 to 1.1.3 in /examples/bun-hono-rl in the dependencies group ([#804](#804)) ([ecada7f](ecada7f))
* **example:** Bump @types/bun from 1.1.2 to 1.1.3 in /examples/bun-rl in the dependencies group ([#800](#800)) ([de15757](de15757))
* **example:** Bump ai from 3.1.30 to 3.1.31 in /examples/nextjs-14-openai in the dependencies group ([#915](#915)) ([84510a8](84510a8))
* **example:** Bump lucide-react from 0.390.0 to 0.394.0 in /examples/nextjs-14-authjs-5 in the dependencies group ([#916](#916)) ([0414404](0414404))
* **example:** Bump the dependencies group across 1 directory with 12 updates ([#921](#921)) ([2e373c4](2e373c4))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#872](#872)) ([2e8257d](2e8257d))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#876](#876)) ([e35a61a](e35a61a))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#877](#877)) ([37b268f](37b268f))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#878](#878)) ([03e8f0a](03e8f0a))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#881](#881)) ([f37d892](f37d892))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#883](#883)) ([22b4792](22b4792))
* **example:** Bump the dependencies group across 1 directory with 2 updates ([#888](#888)) ([6d5b708](6d5b708))
* **example:** Bump the dependencies group across 1 directory with 3 updates ([#875](#875)) ([a7b541e](a7b541e))
* **example:** Bump the dependencies group across 1 directory with 3 updates ([#882](#882)) ([1b38026](1b38026))
* **example:** Bump the dependencies group across 1 directory with 4 updates ([#892](#892)) ([4dddd0c](4dddd0c))
* **example:** Bump the dependencies group across 1 directory with 4 updates ([#899](#899)) ([99886d1](99886d1))
* **example:** Bump the dependencies group across 1 directory with 9 updates ([#889](#889)) ([a5f9db6](a5f9db6))
* **example:** Bump the dependencies group in /examples/nextjs-14-react-hook-form with 2 updates ([#919](#919)) ([391f3fc](391f3fc))


### 📝 Documentation

* Add headers package to root readme ([#837](#837)) ([d1089ad](d1089ad))
* Add quick start links & update Bun example ([#870](#870)) ([ee3079f](ee3079f))
* Remove wording that implies is Shield is added by default ([#796](#796)) ([a85d18c](a85d18c))


### 🧹 Miscellaneous Chores

* **analyze:** Leverage conditional exports to load Wasm appropriately ([#887](#887)) ([d7a698f](d7a698f))
* **ci:** Avoid dependabot for bun examples ([#914](#914)) ([09391f7](09391f7))
* **decorate:** Use console to log instead of Arcjet logger ([#865](#865)) ([39bfcfc](39bfcfc))
* **docs:** Add live example app to READMEs ([#823](#823)) ([8b1c811](8b1c811))
* **logger:** Replace nodejs util import with our sprintf library ([#857](#857)) ([edd99a1](edd99a1))
* **logger:** Update description to match implementation ([#907](#907)) ([0840358](0840358))
</details>

---
This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@davidmytton davidmytton davidmytton approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Rework IP header lookups
2 participants
@blaine-arcjet @davidmytton