Make ORIGINAL_IP_HEADER_NAME optional

api/src/api/authentication.py

@@ -18,7 +18,7 @@ from api.database import *
 import api
 
 _BASE_URL = api.config["API_BASE_URL"]
-_ORIGINAL_IP_HEADER_NAME = api.config["ORIGINAL_IP_HEADER_NAME"]
+_ORIGINAL_IP_HEADER_NAME = api.config.get("ORIGINAL_IP_HEADER_NAME")
 
 
 def api_moderator_route(require_csrf_token: bool = False):
@@ -111,7 +111,7 @@ def are_view_permissions_fulfilled(perm: ViewPermissions):
     if isinstance(perm, ViewPermissionsAuthentication):
         if perm.rwth_authentication and (
                 api_session.is_rwth_authenticated
-                or (_ORIGINAL_IP_HEADER_NAME in request.headers and is_rwth_ip(request.headers[_ORIGINAL_IP_HEADER_NAME]))
+                or (_ORIGINAL_IP_HEADER_NAME is not None and _ORIGINAL_IP_HEADER_NAME in request.headers and is_rwth_ip(request.headers[_ORIGINAL_IP_HEADER_NAME]))
         ):
             return True