RateLimiter and LoggingMiddleware keyed/recorded the client IP from the raw
TCP peer, which behind any reverse proxy is the proxy itself — every
visitor shared one rate-limit bucket and access logs showed the proxy's
address for every request. Both now accept trust_proxy_headers=True to
read the real client from X-Forwarded-For/X-Real-IP instead, opt-in to
avoid header-spoofing when there's no proxy in front.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
kennethreitz
9a3bbce46c