moved whitelist to settings

Author: shukriadams

src/Tetrifact.Core/ISettings.cs

@@ -237,5 +237,10 @@ public interface ISettings
         /// </summary>
         /// <returns></returns>
         bool Validate();
+
+        /// <summary>
+        /// IPs treated as "from own website"
+        /// </summary>
+        IEnumerable<string> WhiteListedLocalAddresses { get; set; }
     }
 }

src/Tetrifact.Core/Settings.cs

@@ -102,6 +102,8 @@ public class Settings : ISettings
 
         public IEnumerable<TagColor> TagColors { get; set; }
 
+        public IEnumerable<string> WhiteListedLocalAddresses { get; set; }
+
         #endregion
 
         #region CTORS
@@ -150,6 +152,7 @@ public Settings()
             this.Theme = "dark";
             this.WipeTempOnStart = true;
             this.WorkerThreadCount = 8;
+            this.WhiteListedLocalAddresses = new string[] { };
         }
 
         #endregion

src/Tetrifact.Web/Controllers/ArchivesController.cs

@@ -94,12 +94,6 @@ public ActionResult GetArchive(string packageId, [FromQuery(Name = "ticket")] st
                 if (!_indexReader.PackageExists(packageId))
                     throw new PackageNotFoundException(packageId);
 
-                string[] localhosts = new string[] { 
-                    "localhost",
-                    "127.0.0.1",
-                    "0.0.0.0"
-                };
-
                 // enforce ticket if queue enabled
                 RequestHeaders headers = Request.GetTypedHeaders();
                 string range = string.Empty;
@@ -113,7 +107,7 @@ public ActionResult GetArchive(string packageId, [FromQuery(Name = "ticket")] st
                 if (Request.HttpContext.Connection.RemoteIpAddress != null)
                     host = Request.HttpContext.Connection.RemoteIpAddress.ToString();
 
-                bool isLocal = localhosts.Contains(headers.Host.Host.ToLower());
+                bool isLocal = _settings.WhiteListedLocalAddresses.Contains(headers.Host.Host.ToLower());
                 string ticketLog = string.Empty;
 
                 // local (this website) downloads always allowed.