Merge pull request #808 from arXiv/institutional-banner-x-forwarded-for

ARXIVCE-2902 use first X-Forwarded-For IP in /institutional_banner

browse/routes/ui.py

@@ -148,7 +148,16 @@ def catchup(subject:str, date:str) -> Response:
 @blueprint.route("institutional_banner", methods=["GET"])
 def institutional_banner() -> Any:
     try:
-        result = get_institution(request.remote_addr)
+        forwarded_ips = request.headers.getlist("X-Forwarded-For")
+        if len(forwarded_ips)>0:
+            ip = str(forwarded_ips[0]).split(',')[0]
+            ip = ip.strip()
+        elif request.remote_addr is None:
+            return ("{}", status.OK)
+        else:
+            ip = str(request.remote_addr)
+
+        result = get_institution(ip)
         if result:
             return (result, status.OK)
         else: