Initial commit

libs/security/utils.py

@@ -0,0 +1,20 @@
+"""Security utility functions."""
+
+import ipaddress
+
+import structlog
+
+logger = structlog.get_logger()
+
+
+def is_internal_request(client_ip: str, internal_cidrs: list[str]) -> bool:
+    """Check if request comes from internal network"""
+    try:
+        client_addr = ipaddress.ip_address(client_ip)
+        for cidr in internal_cidrs:
+            if client_addr in ipaddress.ip_network(cidr):
+                return True
+        return False
+    except ValueError:
+        logger.warning("Invalid client IP address", client_ip=client_ip)
+        return False