Module: Otto::Privacy::Core

Included in:
Otto
Defined in:
lib/otto/privacy/core.rb

Overview

Core privacy configuration methods included in the Otto class. Provides the public API for configuring IP privacy features.

Instance Method Summary collapse

Instance Method Details

#configure_ip_privacy(octet_precision: nil, hash_rotation: nil, geo: nil, redis: nil) ⇒ Object

Configure IP privacy settings

Privacy is enabled by default. Use this method to customize privacy behavior without disabling it entirely.

Examples:

Mask 2 octets instead of 1

otto.configure_ip_privacy(octet_precision: 2)

Disable geo-location

otto.configure_ip_privacy(geo: false)

Custom hash rotation

otto.configure_ip_privacy(hash_rotation: 24.hours)

Multi-server with Redis

redis = Redis.new(url: ENV['REDIS_URL'])
otto.configure_ip_privacy(redis: redis)

Parameters:

  • octet_precision (Integer) (defaults to: nil) —

    Number of octets to mask (1 or 2, default: 1)

  • hash_rotation (Integer) (defaults to: nil) —

    Seconds between key rotation (default: 86400)

  • geo (Boolean) (defaults to: nil) —

    Enable geo-location resolution (default: true)

  • redis (Redis) (defaults to: nil) —

    Redis connection for multi-server atomic key generation



68
69
70
71
72
73
74
75
76
77
78
79
 
# File 'lib/otto/privacy/core.rb', line 68

def configure_ip_privacy(octet_precision: nil, hash_rotation: nil, geo: nil, redis: nil)
  ensure_not_frozen!
  config = @security_config.ip_privacy_config

  config.octet_precision = octet_precision if octet_precision
  config.hash_rotation_period = hash_rotation if hash_rotation
  config.geo_enabled = geo unless geo.nil?
  config.instance_variable_set(:@redis, redis) if redis

  # Validate configuration
  config.validate!
end

#disable_ip_privacy! ⇒ Object

Disable IP privacy to access original IP addresses

IMPORTANT: By default, Otto masks public IP addresses for privacy. Private/localhost IPs (127.0.0.0/8, 10.0.0.0/8, etc.) are never masked. Only disable this if you need access to original public IPs.

When disabled:

  • env contains the real IP address

  • env also contains the real IP

  • No PrivateFingerprint is created

Examples:

otto.disable_ip_privacy!


23
24
25
26
 
# File 'lib/otto/privacy/core.rb', line 23

def disable_ip_privacy!
  ensure_not_frozen!
  @security_config.ip_privacy_config.disable!
end

#enable_full_ip_privacy! ⇒ void

This method returns an undefined value.

Enable full IP privacy (mask ALL IPs including private/localhost)

By default, Otto exempts private and localhost IPs from masking for better development experience. Call this method to mask ALL IPs regardless of type.

Examples:

Enable full privacy (mask all IPs)

otto = Otto.new(routes_file)
otto.enable_full_ip_privacy!
# Now 127.0.0.1 → 127.0.0.0, 192.168.1.100 → 192.168.1.0

Raises:

  • (FrozenError) —

    if called after configuration is frozen



41
42
43
44
 
# File 'lib/otto/privacy/core.rb', line 41

def enable_full_ip_privacy!
  ensure_not_frozen!
  @security_config.ip_privacy_config.mask_private_ips = true
end