Add function to block access to website from certain IP addresses

Author: constantine-nikolaou

app/controllers/application_controller.rb

@@ -8,6 +8,9 @@ class ApplicationController < ActionController::Base
   # API access
   before_action :authenticate_with_token!, if: :api_request
 
+  # Block signups from unwanted IP addresses
+  before_action :block_ip_addresses
+
   def after_sign_in_path_for(resource)
     session[:custom_identifier] = resource.custom_identifier
     root_path
@@ -111,4 +114,13 @@ def authenticate_with_token!
         end
       end
     end
+
+  protected
+    def block_ip_addresses
+      head :unauthorized if AppSettings.ip_addresses_black_list.include?(current_ip_address)
+    end
+
+    def current_ip_address
+      request.env['HTTP_X_REAL_IP'] || request.env['REMOTE_ADDR']
+    end
 end

config/settings/development.yml.sample

@@ -23,7 +23,12 @@ admin_email: ''
 
 google_analytics_code: ''
 
+ip_addresses_black_list:
+  - 123.123.123.123
+
 developers_emails:
   - email@example.com
 
 sender_email: email@example.com
+
+meta_tags_keywords: ''

config/settings/production.yml.sample

@@ -23,7 +23,12 @@ admin_email: ''
 
 google_analytics_code: ''
 
+ip_addresses_black_list:
+  - 123.123.123.123
+
 developers_emails:
   - email@example.com
 
 sender_email: email@example.com
+
+meta_tags_keywords: ''

config/settings/test.yml.sample

@@ -24,13 +24,12 @@ admin_email: 'email@example.com'
 
 google_analytics_code: ''
 
+ip_addresses_black_list:
+  - 123.123.123.123
+
 developers_emails:
   - email@example.com
 
-sender_email: 'email@example.com'
+sender_email: email@example.com
 
-meta_tags_keywords: 'web developer, mobile developer, software engineer,
-                    technical director, CIO, software developer,
-                    back-end developer, front-end developer,
-                    technical project manager, CTO, jobs, freelance,
-                    online community, lebanon, UAE, Egypt, Jordan, Syria'
+meta_tags_keywords: ''