From 9f8c085a268955880724bffeba482136541d139a Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Oct 12 2017 08:53:32 +0000
Subject: Log which IP address was denied accessing the internal endpoint


Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

---

diff --git a/pagure/internal/__init__.py b/pagure/internal/__init__.py
index c39dbb0..f8b5d93 100644
--- a/pagure/internal/__init__.py
+++ b/pagure/internal/__init__.py
@@ -11,6 +11,7 @@ Internal endpoints.
 """
 
 import collections
+import logging
 import os
 
 import flask
@@ -29,6 +30,9 @@ import pagure.lib.git  # noqa: E402
 import pagure.ui.fork  # noqa: E402
 
 
+_log = logging.getLogger(__name__)
+
+
 MERGE_OPTIONS = {
     'NO_CHANGE': {
         'short_code': 'No changes',
@@ -59,6 +63,8 @@ def localonly(function):
         ip_allowed = pagure.APP.config.get(
             'IP_ALLOWED_INTERNAL', ['127.0.0.1', 'localhost', '::1'])
         if flask.request.remote_addr not in ip_allowed:
+            _log.debug('IP: %s is not in the list of allowed IPs: %s' % (
+                flask.request.remote_addr, ip_allowed))
             flask.abort(403)
         else:
             return function(*args, **kwargs)