From 141a8210915ddda99f5f5e86affc21e7331f1682 Mon Sep 17 00:00:00 2001 From: = Date: Mon, 7 Apr 2025 21:43:17 +0530 Subject: [PATCH] feat: added env for dynamic secret to allow internal ip --- backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts | 2 +- backend/src/lib/config/env.ts | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts b/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts index d4b634b5d..4bd384bcf 100644 --- a/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts +++ b/backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts @@ -42,7 +42,7 @@ export const verifyHostInputValidity = async (host: string, isGateway = false) = inputHostIps.push(...resolvedIps); } - if (!isGateway) { + if (!isGateway && !appCfg.DYNAMIC_SECRET_ALLOW_INTERNAL_IP) { const isInternalIp = inputHostIps.some((el) => isPrivateIp(el)); if (isInternalIp) throw new BadRequestError({ message: "Invalid db host" }); } diff --git a/backend/src/lib/config/env.ts b/backend/src/lib/config/env.ts index 0906e5269..10ab16b97 100644 --- a/backend/src/lib/config/env.ts +++ b/backend/src/lib/config/env.ts @@ -193,6 +193,7 @@ const envSchema = z GATEWAY_RELAY_REALM: zpStr(z.string().optional()), GATEWAY_RELAY_AUTH_SECRET: zpStr(z.string().optional()), + DYNAMIC_SECRET_ALLOW_INTERNAL_IP: zodStrBool.default("false"), /* ----------------------------------------------------------------------------- */ /* App Connections ----------------------------------------------------------------------------- */