Trusted Proxies

Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For Spoofing

Define the intended reverse-proxy chain, reject untrusted forwarding headers and block unauthorized direct-origin access. Plan allowed and denied path tests while keeping client IP attribution separate from user authentication.