FEATURE: allow restricting API keys to a particular range

spec/components/auth/default_current_user_provider_spec.rb

@@ -31,6 +31,27 @@ describe Auth::DefaultCurrentUserProvider do
     }.to raise_error(Discourse::InvalidAccess)
   end
 
+  it "raises for a user with a mismatching ip" do
+    user = Fabricate(:user)
+    ApiKey.create!(key: "hello", user_id: user.id, created_by_id: -1, allowed_ips: ['10.0.0.0/24'])
+
+    expect{
+      provider("/?api_key=hello&api_username=#{user.username.downcase}", "REMOTE_ADDR" => "10.1.0.1").current_user
+    }.to raise_error(Discourse::InvalidAccess)
+
+  end
+
+  it "allows a user with a matching ip" do
+    user = Fabricate(:user)
+    ApiKey.create!(key: "hello", user_id: user.id, created_by_id: -1, allowed_ips: ['10.0.0.0/24'])
+
+    found_user = provider("/?api_key=hello&api_username=#{user.username.downcase}",
+                          "REMOTE_ADDR" => "10.0.0.22").current_user
+
+    found_user.id.should == user.id
+
+  end
+
   it "finds a user for a correct system api key" do
     user = Fabricate(:user)
     ApiKey.create!(key: "hello", created_by_id: -1)