From 26a2e23f2d27e4240163fd2af647d443d63e12c2 Mon Sep 17 00:00:00 2001
From: Suat Karabacak <suathh@hotmail.com>
Date: Sun, 10 Dec 2023 18:55:09 +0300
Subject: [PATCH] deny requests for ip restricted master keys

---
 src/middlewares.js | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/middlewares.js b/src/middlewares.js
index 9319130188..b02f5e4e60 100644
--- a/src/middlewares.js
+++ b/src/middlewares.js
@@ -246,6 +246,11 @@ export function handleParseHeaders(req, res, next) {
       `Request using master key rejected as the request IP address '${clientIp}' is not set in Parse Server option 'masterKeyIps'.`
     );
     isMaster = false;
+    // Create a custom error with a 403 status and a specific message #BreakingChange
+    const error = new Error();
+    error.status = 403; // Forbidden status code
+    error.message = `Access denied: IP address '${clientIp}' is not authorized to use the master key.`;
+    throw error;
   }
 
   if (isMaster) {