diff --git a/src/api/admin.rs b/src/api/admin.rs index 2d68d5652a829db623861561666178c4679c7eea..98448d33ab2b5c7c24981ed69c7f0d40b3ab13c0 100644 --- a/src/api/admin.rs +++ b/src/api/admin.rs @@ -91,8 +91,15 @@ impl<'a, 'r> FromRequest<'a, 'r> for AdminToken { // Option 2a: Send it to admin email, like upstream // Option 2b: Print in console or save to data dir, so admin can check + use crate::auth::ClientIp; + + let ip = match request.guard::<ClientIp>() { + Outcome::Success(ip) => ip, + _ => err_handler!("Error getting Client IP"), + }; + if access_token != config_token { - err_handler!("Invalid admin token") + err_handler!("Invalid admin token", format!("IP: {}.", ip.ip)) } Outcome::Success(AdminToken {}) diff --git a/src/error.rs b/src/error.rs index 8a6c6fb5b748fbe6495ee088eba4cd3a0af85bd8..6e5c627eb14dd2a5fa19b3d515474b07cb1c1cf7 100644 --- a/src/error.rs +++ b/src/error.rs @@ -163,7 +163,11 @@ macro_rules! err_json { #[macro_export] macro_rules! err_handler { ($expr:expr) => {{ - error!("Unauthorized Error: {:#?}", $expr); + error!("Unauthorized Error: {}", $expr); return rocket::Outcome::Failure((rocket::http::Status::Unauthorized, $expr)); }}; + ($usr_msg:expr, $log_value:expr) => {{ + error!("Unauthorized Error: {}. {}", $usr_msg, $log_value); + return rocket::Outcome::Failure((rocket::http::Status::Unauthorized, $usr_msg)); + }}; }