http
GET /api/admin HTTP/1.1
Host: api.example.com
Authorization: Bearer valid_token
X-Forwarded-For: 203.0.113.42
HTTP/1.1 403 Forbidden
Content-Type: application/json
{
"error": "ip_not_allowed",
"message": "Admin API only accessible from whitelisted IPs",
"client_ip": "203.0.113.42",
"allowed_ranges": ["192.0.2.0/24", "198.51.100.0/24"]
}