From f9730bb46b1a5ee3a31d849b3c057335aafbe58f Mon Sep 17 00:00:00 2001
From: Pliable Pixels <pliablepixels@gmail.com>
Date: Wed, 8 May 2019 14:07:48 -0400
Subject: [PATCH] remove auth_hash_ip

---
 web/includes/auth.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/includes/auth.php b/web/includes/auth.php
index 03e0fe0c6..c446d0024 100644
--- a/web/includes/auth.php
+++ b/web/includes/auth.php
@@ -189,7 +189,7 @@ function validateToken ($token, $allowed_token_type='access') {
 
   global $user;
   $key = ZM_AUTH_HASH_SECRET;
-  if (ZM_AUTH_HASH_IPS) $key .= $_SERVER['REMOTE_ADDR'];
+  //if (ZM_AUTH_HASH_IPS) $key .= $_SERVER['REMOTE_ADDR'];
   try {
     $decoded_token =  JWT::decode($token, $key, array('HS256'));
   } catch (Exception $e) {