final String secure = fessConfig.getCookieSearchParameterSecure();
        if (StringUtil.isBlank(secure)) {
            final String forwardedProto = request.getHeader("X-Forwarded-Proto");
            if ("https".equalsIgnoreCase(forwardedProto)) {
                return true;
            }
            return request.isSecure();
        }

     *
     * @param request the HTTP servlet request
     * @return the client IP address
     */
    public String getClientIp(final HttpServletRequest request) {
        final String value = request.getHeader("x-forwarded-for");
        if (StringUtil.isNotBlank(value)) {
            return value;
        }
        return request.getRemoteAddr();
    }

    /**