Laravel Middleware for Amazon Web Services (AWS) IP Address Range Validation
, (*1)
This package allows for validation of incoming requests against the official Amazon Web Services (AWS) IP Address Range.
Use this to determine if an incoming request actually comes from the AWS infrastructure e.g. for Simple Notification Service (SNS) payloads., (*2)
Features
- Passes incoming HTTP requests from AWS, rejects everything else
- AWS ip address range is fetched on demand and therefore always up-to-date
- Caching of ip address range --> only fetched once per day
- Retry with exponential back-off on network issues while fetching the ip address range from AWS
Notes
-
arubacao/aws-ip-range-middleware is functional and fully tested for Laravel 5.0 - 7.* and PHP 7.0 - 7.3.
Installation
Install this package via composer:, (*3)
composer require arubacao/aws-ip-range-middleware
Registering Middleware
First assign the aws-ip-range-middleware a key in your app/Http/Kernel.php file to the $routeMiddleware property., (*4)
// Within App\Http\Kernel Class...
protected $routeMiddleware = [
'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
// .
// .
// .
'aws-ip-range' => \Arubacao\AwsIpRange\AwsIpRangeMiddleware::class,
];
Usage
Once the aws-ip-range-middleware has been defined in the HTTP kernel, you may use the middleware method to assign aws-ip-range-middleware to a route:, (*5)
Route::post('api/sns', function () {
//
})->middleware('aws-ip-range');
// Older Laravel Versions:
Route::post('api/sns', ['middleware' => 'aws-ip-range', function () {
//
}]);
When assigning middleware, you may also pass the fully qualified class name:
Note: In this case you do not need to register the aws-ip-range-middleware in the HTTP kernel, (*6)
use Arubacao\AwsIpRange\AwsIpRangeMiddleware;
Route::post('api/sns', function () {
//
})->middleware(AwsIpRangeMiddleware::class);
// Older Laravel Versions:
Route::post('api/sns', ['middleware' => AwsIpRangeMiddleware::class, function () {
//
}]);
Todo's
- Enable/Disable caching
- Choose cache storage
- Command to fetch ip address range and store locally
Testing
bash
composer test, (*7)
Contributing
Please see CONTRIBUTING for details., (*8)
Credits
License
The MIT License (MIT). Please see License File for more information., (*9)
Wallogit.com
