Allow IP restrictions to be set for individual users

[david-billings]

Allow IP restrictions to be set for individual users

Problem

We have certain users that we would like to restrict logins/token issuance to for specific IP addresses. These accounts are sensitive and 2FA is not always an option. IP Restriction would add another layer of security to logins.

Solution

Allow a simple API/UI interface to allow the exclusive whitelisting of single/multiple IP's using CIDR notation. If set all requests from IP's outside of this whitelist will be denied.

Alternatives/workarounds

None

Additional context

N/A

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.

[mooreds]

Thanks for filing this @david-billings !

This would mostly likely be a paid feature as it would leverage the IP ACLs already part of the advanced threat detection package.