ip filtering 추가

Author: golony6449

payment/views.py

@@ -6,13 +6,19 @@
 from payment.logic import generate_payment_key
 from payment.models import Payment
 
+from django.conf import settings
+
 
 class PortoneWebhookApi(APIView):
     def post(self, request):
-        # TODO: IP Filtering
-        # 52.78.100.19
-        # 52.78.48.223
-        # 52.78.5.241 (Webhook Test Only)
+        portone_ips = [
+            "52.78.100.19",
+            "52.78.48.223",
+            "52.78.5.241"   # (Webhook Test Only)
+        ]
+
+        if settings.DEBUG is False and request.META.get("REMOTE_ADDR") not in portone_ips:
+            raise ValueError("Not Allowed IP")
 
         target_payment = Payment.objects.get(payment_key=request.data["merchant_uid"])