···99const ipTimestamps = new Map<string, number[]>();
10101111function getIp(request: Request): string {
1212- const ip = request.headers.get('x-forwarded-for')?.split(',')[0]?.trim();
1313- if (!ip) console.warn('[invite] no x-forwarded-for header — rate limiting under "unknown"');
1212+ const ip = request.headers.get('cf-connecting-ip')
1313+ ?? request.headers.get('x-forwarded-for')?.split(',')[0]?.trim();
1414+ if (!ip) console.warn('[invite] no IP header — rate limiting under "unknown"');
1415 return ip ?? 'unknown';
1516}
1617