ref: Allow to extract user IP address without req.user present

Author: kamilogorek

packages/node/src/handlers.ts

@@ -174,36 +174,21 @@ const DEFAULT_USER_KEYS = ['id', 'username', 'email'];
 
 /** JSDoc */
 function extractUserData(
-  req: {
-    ip?: string;
-    connection?: {
-      remoteAddress?: string;
-    };
-    user?: {
-      [key: string]: any;
-    };
+  user: {
+    [key: string]: any;
   },
   keys: boolean | string[],
 ): { [key: string]: any } {
-  const user: { [key: string]: any } = {};
+  const extractedUser: { [key: string]: any } = {};
   const attributes = Array.isArray(keys) ? keys : DEFAULT_USER_KEYS;
 
   attributes.forEach(key => {
-    if (req.user && key in req.user) {
-      user[key] = req.user[key];
+    if (user && key in user) {
+      extractedUser[key] = user[key];
     }
   });
 
-  // client ip:
-  //   node: req.connection.remoteAddress
-  //   express, koa: req.ip
-  const ip = req.ip || (req.connection && req.connection.remoteAddress);
-
-  if (ip) {
-    user.ip_address = ip;
-  }
-
-  return user;
+  return extractedUser;
 }
 
 /**
@@ -229,6 +214,13 @@ export function parseRequest(
   event: Event,
   req: {
     [key: string]: any;
+    user?: {
+      [key: string]: any;
+    };
+    ip?: string;
+    connection?: {
+      remoteAddress?: string;
+    };
   },
   options?: ParseRequestOptions,
 ): Event {
@@ -260,11 +252,25 @@ export function parseRequest(
     event.server_name = global.process.env.SENTRY_NAME || os.hostname();
   }
 
-  if (options.user && req.user) {
-    event.user = {
-      ...event.user,
-      ...extractUserData(req, options.user),
-    };
+  if (options.user) {
+    const extractedUser = req.user ? extractUserData(req.user, options.user) : {};
+
+    // client ip:
+    //   node: req.connection.remoteAddress
+    //   express, koa: req.ip
+    if (Array.isArray(options.user) && options.user.includes('ip')) {
+      const ip = req.ip || (req.connection && req.connection.remoteAddress);
+      if (ip) {
+        extractedUser.ip_address = ip;
+      }
+    }
+
+    if (Object.keys(extractedUser)) {
+      event.user = {
+        ...event.user,
+        ...extractedUser,
+      };
+    }
   }
 
   if (options.transaction && !event.transaction) {

packages/node/test/handlers.test.ts

@@ -22,27 +22,48 @@ describe('parseRequest', () => {
     const DEFAULT_USER_KEYS = ['id', 'username', 'email'];
     const CUSTOM_USER_KEYS = ['custom_property'];
 
-    test('parseRequest.user only contains the default properties from the user', done => {
-      const fakeEvent: Event = {};
-      const parsedRequest: Event = parseRequest(fakeEvent, mockReq);
-      const userKeys = Object.keys(parsedRequest.user);
-
-      expect(userKeys).toEqual(DEFAULT_USER_KEYS);
-      expect(userKeys).not.toEqual(expect.arrayContaining(CUSTOM_USER_KEYS));
-      done();
+    test('parseRequest.user only contains the default properties from the user', () => {
+      const parsedRequest: Event = parseRequest({}, mockReq, {
+        user: DEFAULT_USER_KEYS,
+      });
+      expect(Object.keys(parsedRequest.user as any[])).toEqual(DEFAULT_USER_KEYS);
     });
 
-    test('parseRequest.user only contains the custom properties specified in the options.user array', done => {
-      const options = {
+    test('parseRequest.user only contains the custom properties specified in the options.user array', () => {
+      const parsedRequest: Event = parseRequest({}, mockReq, {
         user: CUSTOM_USER_KEYS,
-      };
-      const fakeEvent: Event = {};
-      const parsedRequest: Event = parseRequest(fakeEvent, mockReq, options);
-      const userKeys = Object.keys(parsedRequest.user);
+      });
+      expect(Object.keys(parsedRequest.user as any[])).toEqual(CUSTOM_USER_KEYS);
+    });
 
-      expect(userKeys).toEqual(CUSTOM_USER_KEYS);
-      expect(userKeys).not.toEqual(expect.arrayContaining(DEFAULT_USER_KEYS));
-      done();
+    test('parseRequest.user can extract ip from req.ip', () => {
+      const parsedRequest: Event = parseRequest(
+        {},
+        {
+          ...mockReq,
+          ip: '123',
+        },
+        {
+          user: ['ip'],
+        },
+      );
+      expect(parsedRequest.user!.ip_address).toEqual('123');
+    });
+
+    test('parseRequest.user can extract ip from req.connection.remoteAddress', () => {
+      const parsedRequest: Event = parseRequest(
+        {},
+        {
+          ...mockReq,
+          connection: {
+            remoteAddress: '321',
+          },
+        },
+        {
+          user: ['ip'],
+        },
+      );
+      expect(parsedRequest.user!.ip_address).toEqual('321');
     });
   });