{"action":"created","issue":{"url":"https://api.github.com/repos/maxcountryman/flask-login/issues/217","labels_url":"https://api.github.com/repos/maxcountryman/flask-login/issues/217/labels{/name}","comments_url":"https://api.github.com/repos/maxcountryman/flask-login/issues/217/comments","events_url":"https://api.github.com/repos/maxcountryman/flask-login/issues/217/events","html_url":"https://github.com/maxcountryman/flask-login/pull/217","id":89137654,"number":217,"title":"Fix handling of X-Forwarded-For header","user":{"login":"sholsapp","id":969813,"avatar_url":"https://avatars.githubusercontent.com/u/969813?v=3","gravatar_id":"","url":"https://api.github.com/users/sholsapp","html_url":"https://github.com/sholsapp","followers_url":"https://api.github.com/users/sholsapp/followers","following_url":"https://api.github.com/users/sholsapp/following{/other_user}","gists_url":"https://api.github.com/users/sholsapp/gists{/gist_id}","starred_url":"https://api.github.com/users/sholsapp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sholsapp/subscriptions","organizations_url":"https://api.github.com/users/sholsapp/orgs","repos_url":"https://api.github.com/users/sholsapp/repos","events_url":"https://api.github.com/users/sholsapp/events{/privacy}","received_events_url":"https://api.github.com/users/sholsapp/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":15,"created_at":"2015-06-17T22:01:44Z","updated_at":"2015-07-20T15:33:37Z","closed_at":"2015-06-17T23:07:36Z","pull_request":{"url":"https://api.github.com/repos/maxcountryman/flask-login/pulls/217","html_url":"https://github.com/maxcountryman/flask-login/pull/217","diff_url":"https://github.com/maxcountryman/flask-login/pull/217.diff","patch_url":"https://github.com/maxcountryman/flask-login/pull/217.patch"},"body":" The code that calculates a user's identifier uses the remote address or\r\n the contents of the X-Forwarded-For header doesn't account for the fact\r\nthat the X-Forwarded-For header can contain a comma separated list of\r\nremote addresses, which is the case for scenarios in which 2+ proxy\r\nservers are involved in the request forwarding. This caveat causes\r\nFlask-Login to unexpectedly log users out when the combination of proxy\r\nservers that routed a previous request change.\r\n    \r\nSee http://tools.ietf.org/html/rfc7239 for more information about\r\nX-Forwarded-For standard."},"comment":{"url":"https://api.github.com/repos/maxcountryman/flask-login/issues/comments/122919432","html_url":"https://github.com/maxcountryman/flask-login/pull/217#issuecomment-122919432","issue_url":"https://api.github.com/repos/maxcountryman/flask-login/issues/217","id":122919432,"user":{"login":"maxcountryman","id":74351,"avatar_url":"https://avatars.githubusercontent.com/u/74351?v=3","gravatar_id":"","url":"https://api.github.com/users/maxcountryman","html_url":"https://github.com/maxcountryman","followers_url":"https://api.github.com/users/maxcountryman/followers","following_url":"https://api.github.com/users/maxcountryman/following{/other_user}","gists_url":"https://api.github.com/users/maxcountryman/gists{/gist_id}","starred_url":"https://api.github.com/users/maxcountryman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/maxcountryman/subscriptions","organizations_url":"https://api.github.com/users/maxcountryman/orgs","repos_url":"https://api.github.com/users/maxcountryman/repos","events_url":"https://api.github.com/users/maxcountryman/events{/privacy}","received_events_url":"https://api.github.com/users/maxcountryman/received_events","type":"User","site_admin":false},"created_at":"2015-07-20T15:33:37Z","updated_at":"2015-07-20T15:33:37Z","body":"@sholsapp locally building locally is your best bet for now. I just don't know when I'll be able to get around to a release--I'm not willing to rush out a broken release. Sorry."}}