fix(multiplayer): resolve client IP behind proxies

server/api/service.go

@@ -127,6 +127,7 @@ type Service struct {
 	RankedProfileProvider RankedProfileProvider
 	TierPolicy            domain.TierPolicy
 	RateLimiter           *RateLimiter
+	ClientIPs             *ClientIPResolver
 	Admission             AdmissionController
 	// Log receives a credential-safe structured event for lifecycle-relevant
 	// reads and mutations. Nil
@@ -207,7 +208,7 @@ func (s *Service) Handler() http.Handler {
 	var handler http.Handler = mux
 	if s.RateLimiter != nil {
 		handler = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			if !s.RateLimiter.AllowKeys(requestRateKeys(r), s.now()) {
+			if !s.RateLimiter.AllowKeys(requestRateKeys(r, s.ClientIPs), s.now()) {
 				writeError(w, http.StatusTooManyRequests, "rate_limited")
 				return
 			}