# cloudflare-middleware

> Restores request origin ip to `req.origin_ip`. Denies other requests.

Latest version **1.0.4** (published 2017-10-14) · ISC license · 0 weekly downloads

## Install

```sh
npm install cloudflare-middleware
pnpm add cloudflare-middleware
yarn add cloudflare-middleware
bun add cloudflare-middleware
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.0.4 |
| Published | 2017-10-14 |
| First published | 2017-10-05 |
| Weekly downloads | 0 |
| License | ISC |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 1 |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Author | Clive Chan |
| Maintainers | cchan |
| Keywords | cloudflare |

## Links

- npm: https://www.npmjs.com/package/cloudflare-middleware
- Repository: https://github.com/clive-io/cloudflare-middleware
- Homepage: https://github.com/clive-io/cloudflare-middleware#readme
- Issues: https://github.com/clive-io/cloudflare-middleware/issues
- npm.io page: https://npm.io/package/cloudflare-middleware

## Dependencies (1)

- [range_check](https://npm.io/package/range_check.md) ^1.4.0

## Recent versions

- 1.0.4 (latest) — 2017-10-14
- 1.0.3 — 2017-10-05
- 1.0.2 — 2017-10-05
- 1.0.1 — 2017-10-05

## README

# cloudflare-middleware

Restores request origin ip to `req.origin_ip`. Denies other requests.

## Usage

```nodejs
let app = express();
app.use(require("cloudflare-middleware")());
```

This is a safer alternative to naively using `app.set("trust proxy");`, as this checks CloudFlare IP address ranges.

This, however, has been deprecated in favor of the following:

```nodejs
const cloudflareIp = require('cloudflare-ip');

app.set('trust proxy', ip => {
  if(ip.startsWith('::ffff:'))
    ip = ip.substr(7);
  return ip == '127.0.0.1' || cloudflareIp(ip);
});

---
_Source: https://npm.io/package/cloudflare-middleware · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._