decentraland / comms-gatekeeper / 28246643186

85%

main: 85%

Pull #274

github

feat: record player IP/device on token requests and support device/IP bans

Capture each player's latest IP (Cloudflare cf-connecting-ip header) and
device id (deviceIdentifier from the signed-fetch auth metadata) into a new
player_connection_info table whenever a LiveKit token is requested on
/get-scene-adapter or /private-messages/token. Capture is best-effort and
never blocks token issuance.

Use that data for moderation: banning a player now always snapshots their
recorded device id, and optionally (banIp flag) their IP, onto the user_bans
record. Token endpoints reject (403) when the request's address, device id, or
IP matches an active ban, so a banned player is caught even under a different
wallet. The existing GET /bans listing now surfaces the banned device id/IP.

Empty IP/device values are normalized to null so they cannot become
unmatchable dead data. cf-connecting-ip is trusted because the service runs
strictly behind Cloudflare.

1115 of 1430 branches covered (77.97%)

Branch coverage included in aggregate %.

70 of 77 new or added lines in 10 files covered. (90.91%)

3058 of 3455 relevant lines covered (88.51%)

75.17 hits per line