IP Pinning Check
The IP Pinning Check verifies whether IP pinning is enabled. IP pinning means that a session is bound to the client’s IP address. If the IP address changes during an existing session (e.g., due to a proxy hop or network change), the session becomes invalid and the user must re-authenticate.
An attacker cannot directly use intercepted session information when IP pinning is enabled.
Security Measures
IP pinning can be enabled in the configuration file <BPC-INSTALL-DIR>/karaf/etc/de.virtimo.bpc.core.cfg.
To do this, set the option ` ipPinningCheck ` to ` `true.
When using an HTTP proxy, you must also configure the header name that transmits the original client IP address.
This is typically ` `X-Forwarded-For.
<BPC-INSTALL-DIR>/karaf/etc/de.virtimo.bpc.core.cfgde.virtimo.bpc.core.ipPinningCheck = true
de.virtimo.bpc.core.ipPinningCheck.httpHeader = X-Forwarded-ForIn a new installation, this option is enabled by default.
