feat: update package name

composer.json

@@ -1,5 +1,5 @@
 {
-  "name": "arch/php-internal-api-client",
+  "name": "paidian/php-internal-api-client",
   "type": "library",
   "require": {
     "guzzlehttp/guzzle": "^6.3",

src/Middleware/InternalApi.php

@@ -10,59 +10,77 @@ use function PdInternalApi\sign;
 class InternalApi
 {
 	
-    public function __construct()
-    {
-        app()->configure('internal_api');
-    }
+	public function __construct()
+	{
+		app()->configure('internal_api');
+	}
 	
-    /**
-     * Handle an incoming request.
-     *
-     * @param  \Illuminate\Http\Request $request
-     * @param  \Closure $next
-     * @return mixed
-     */
-    public function handle($request, Closure $next)
-    {
-        $ip = $request->getClientIp();
+	private function isClientIPPermitted($ip)
+	{
+		if (!app()->environment('production', 'staging')) {
+			return true;
+		}
+		if (Str::startsWith($ip, [
+			'127.0.0.1',
+			//局域网
+			'192.168.',
+			//vpc
+			'10.0.',
+			//pod network
+			'172.20.',
+			//北京办公区
+			'172.16.'
+		])) {
+			return true;
+		}
+		return false;
+	}
 	
-        if (!Str::startsWith($ip, [
-            '127.0.0.', '192.168.', '10.0.'
-        ])) {
-            return new JsonResponse('', 404);
-        }
+	/**
+	 * Handle an incoming request.
+	 *
+	 * @param  \Illuminate\Http\Request $request
+	 * @param  \Closure $next
+	 * @return mixed
+	 */
+	public function handle($request, Closure $next)
+	{
+		$ip = $request->getClientIp();
+		if (!$this->isClientIPPermitted($ip)) {
+			return new JsonResponse("$ip is forbidden", 403);
+		}
 		
-        $params = $request->all();
+		$params = $request->all();
 		
-        if (empty($params['appid'])) {
-            $data = ['error' => 'require appid',];
-            return new JsonResponse($data, 403);
-        }
+		if (empty($params['appid'])) {
+			$data = ['error' => 'require appid',];
+			return new JsonResponse($data, 403);
+		}
 		
-        if (empty($params['timestamp'])) {
-            $data = ['error' => 'require time',];
-            return new JsonResponse($data, 403);
-        } elseif (intval($params['timestamp']) + 60 < time()) {
-            $data = ['error' => 'sign expired',];
-            return new JsonResponse($data, 403);
-        }
+		if (empty($params['timestamp'])) {
+			$data = ['error' => 'require time',];
+			return new JsonResponse($data, 403);
+		} else if (intval($params['timestamp']) + 60 < time()) {
+			$data = ['error' => 'sign expired',];
+			return new JsonResponse($data, 403);
+		}
 		
-        $key = config('internal_api.server.' . $params['appid']);
+		$key = config('internal_api.server.' . $params['appid']);
 		
-        if (empty($key)) {
-            $data = ['error' => 'config error',];
-            return new JsonResponse($data, 403);
-        }
+		if (empty($key)) {
+			$data = ['error' => 'config error',];
+			return new JsonResponse($data, 403);
+		}
 		
-        $sign = sign($params, $key);
-        if ($sign != $params['sign']) {
-            $data = [
-                'error' => 'sign error',
-            ];
-            return new JsonResponse($data, 403);
-        }
+		$sign = sign($params, $key);
+		if ($sign != $params['sign']) {
+			$data = [
+				'error' => 'sign error',
+			];
+			return new JsonResponse($data, 403);
+		}
 		
-        return $next($request);
-    }
+		return $next($request);
+	}
 	
 }

src/ServiceProvider.php

@@ -2,8 +2,26 @@
 
 namespace PdInternalApi;
 
+use Illuminate\Http\Request;
+
 class ServiceProvider extends \Illuminate\Support\ServiceProvider
 {
+	
+	public function boot(){
+		Request::setTrustedProxies([
+			//pod network
+			'172.20.0.0/16',
+			//vpc
+			'10.0.0.0/16',
+			//local
+			'127.0.0.1',
+			//北京办公区
+			'172.16.0.0/16',
+			//aliyun slb
+			'100.116.0.0/16',
+		], Request::HEADER_X_FORWARDED_ALL);
+	}
+	
     /**
      * Register any application services.
      *