Is there any way that i can Restrict Check In & CheckOut Based on IP Address?

Frappe HR
1

Is there any way that i can Restrict Check In & CheckOut Based on IP Address?
I am using Cloudflare - and i want to whitelist only my office and some more ip to check-in and checkout.

Is there any way?

Thanks

2

Hi @ShaonPro:

Check this …

Hope this helps.

3

Can you tell me from where i can add this?
in details - that would be very helpful .

Thanks

4

image
image1849×845 73.7 KB

  1. First Go customize form and select employee doctype and add the custom field in that employee doctype

image
image1829×848 82.1 KB

after update that go to server script by searching

image
image1817×864 49.4 KB

after create server script and add the code in script and then save that and also set the allowed_checkin_ip for employee

1 Like
5

@avc Hey
don’t know but there is nothing showing up.

image
image1440×859 19.1 KB

6

Hi @ShaonPro

Try to refresh browser. If don’t works, open browser console and check if any error is shown. Share screenshot here

7

I have Updated the Script

image
image1452×735 41.6 KB

And Added these - also added IPs
But still user can check in from other ips

image
image1404×797 69.5 KB

8

Please Help

9

Hi @ShaonPro:

Allowed IP address should be informed on each employee document, not in “design”. Anyway, this method just works with one IP. It can be tuned to allow ip ranges, or a list of ips …

Or … try this

if frappe.request.headers.get('X-Forwarded-For'):
    ip_address = frappe.request.headers.get('X-Forwarded-For').split(',')[0]
else:
    ip_address = frappe.request.remote_addr

allowed_ips = ["103.72.212.29", "103.49.170.164"] # write here all your ips

if ip_address not in allowed_ips:
    frappe.throw("IP address not allowed")
1 Like
10

i did these but still no luck.

11

@avc - User still can check in or out.

12

Hi @ShaonPro:

There are a lot of things that could be failing … show how your script is written now.
Share too how your doctype is customized, showing fieldname too.

13

Can’t you restrict the user login from unknown IPs?

14

Hi @Varun:

Since “unknown” is a valid identifier for “X-Forwarded-For”, it should works … the value is not on on the allowed ip addresses.

Hope this helps.

15

Hi @avc

Would I be able to get the IP on the client side with JS?

Thanks so much

16

Hi @EugeneP:

Best way is calling backend method from js, or using some external service like ipify
https://api.ipify.org?format=jsonp&callback=getip

Hope this helps.

17

Solutions For CloudFlare Users.

# Get the client's IP from Cloudflare headers, if available
if frappe.request.headers.get('CF-Connecting-IP'):
    ip_address = frappe.request.headers.get('CF-Connecting-IP')
elif frappe.request.headers.get('X-Forwarded-For'):
    ip_address = frappe.request.headers.get('X-Forwarded-For').split(',')[0]
else:
    ip_address = frappe.request.remote_addr

# Fetch the allowed IPs for the employee as a comma-separated list
allowed_ips = frappe.db.get_value("Employee", doc.employee, "custom_allowed_checkin_ip")

# Convert the list of allowed IPs into an array and strip whitespace
allowed_ips_list = [ip.strip() for ip in allowed_ips.split(',') if ip.strip()]

# Check if the current IP is in the list of allowed IPs
if ip_address not in allowed_ips_list:
    frappe.throw("IP address not allowed for check-in.")