Skip to main content

Project restrict by IP

Issues

It would be useful if projects could be locked down to IP addresses.

This would allow users to be sure that no access to their infrastructure could be obtained from the general internet.

Ideally this would also allow for optional custom headers being used to pass the IP instead of the connected IP in case access to Osie is being proxied.

Posted by bens ·
Status: Completed2 comments

Log in to comment and vote

Comments2

  • bens

    •

    Mar 9

    Yes the authentication layer should provide this type of protection too and I agree the IDP will be the place this is implemented.

    I was thinking this may just give an extra level of protection to accounts in the event one of the protection mechanisms failing (e.g. Misconfiguration, MitM or 0-day)

  • Marius Leustean

    Team•

    Feb 24

    Isn’t this something the authentication layer should take care of (i.e: preventing the general internet from accessing resources)?

    There can be 2FA / Passkeys measures in-place to prevent unauthorized access to the projects.