test: Add tests for user.ip_address on all spans

Add test_user_ip_address_on_all_spans to wsgi, asgi, aiohttp, tornado,
and sanic. Each test creates a child span and verifies user.ip_address
is present on both server and child spans when send_default_pii=True.

Fix tornado and sanic to set user.ip_address on the isolation scope
before the handler runs, so child spans inherit the attribute.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sentrivana

sentry_sdk/integrations/sanic.py

@@ -181,6 +181,11 @@ async def _context_enter(request: "Request") -> None:
         sentry_sdk.traces.continue_trace(dict(request.headers))
         scope.set_custom_sampling_context({"sanic_request": request})
 
+        if should_send_default_pii() and request.remote_addr:
+            sentry_sdk.get_isolation_scope().set_attribute(
+                SPANDATA.USER_IP_ADDRESS, request.remote_addr
+            )
+
         span = sentry_sdk.traces.start_span(
             # Unless the request results in a 404 error, the name and source
             # will get overwritten in _set_transaction
@@ -375,9 +380,6 @@ def _get_request_attributes(request: "Request") -> "Dict[str, Any]":
 
     if should_send_default_pii() and request.remote_addr:
         attributes[SPANDATA.CLIENT_ADDRESS] = request.remote_addr
-        sentry_sdk.get_isolation_scope().set_attribute(
-            SPANDATA.USER_IP_ADDRESS, request.remote_addr
-        )
 
     return attributes
 

sentry_sdk/integrations/tornado.py

@@ -130,6 +130,11 @@ def _handle_request_impl(self: "RequestHandler") -> "Generator[None, None, None]
             sentry_sdk.traces.continue_trace(dict(headers))
             scope.set_custom_sampling_context({"tornado_request": self.request})
 
+            if should_send_default_pii() and self.request.remote_ip:
+                sentry_sdk.get_isolation_scope().set_attribute(
+                    SPANDATA.USER_IP_ADDRESS, self.request.remote_ip
+                )
+
             span_ctx = sentry_sdk.traces.start_span(
                 name=_DEFAULT_ROOT_SPAN_NAME,
                 attributes={
@@ -204,9 +209,6 @@ def _get_request_attributes(request: "Any") -> "Dict[str, Any]":
 
     if should_send_default_pii() and request.remote_ip:
         attributes[SPANDATA.CLIENT_ADDRESS] = request.remote_ip
-        sentry_sdk.get_isolation_scope().set_attribute(
-            SPANDATA.USER_IP_ADDRESS, request.remote_ip
-        )
 
     with capture_internal_exceptions():
         raw_data = _get_tornado_request_data(request)

tests/integrations/aiohttp/test_aiohttp.py

@@ -1590,3 +1590,40 @@ async def handler(request):
         span_id=client_span["span_id"],
         sampled=1,
     )
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("send_default_pii", [True, False])
+async def test_user_ip_address_on_all_spans(
+    sentry_init, aiohttp_client, capture_items, send_default_pii
+):
+    sentry_init(
+        integrations=[AioHttpIntegration()],
+        traces_sample_rate=1.0,
+        send_default_pii=send_default_pii,
+        _experiments={"trace_lifecycle": "stream"},
+    )
+
+    async def hello(request):
+        with sentry_sdk.traces.start_span(name="child-span"):
+            pass
+        return web.Response(text="hello")
+
+    app = web.Application()
+    app.router.add_get("/", hello)
+
+    items = capture_items("span")
+
+    client = await aiohttp_client(app)
+    await client.get("/")
+
+    sentry_sdk.flush()
+
+    child_span, server_span, client_span = [item.payload for item in items]
+
+    if send_default_pii:
+        assert server_span["attributes"]["user.ip_address"] == "127.0.0.1"
+        assert child_span["attributes"]["user.ip_address"] == "127.0.0.1"
+    else:
+        assert "user.ip_address" not in server_span["attributes"]
+        assert "user.ip_address" not in child_span["attributes"]

tests/integrations/asgi/test_asgi.py

@@ -1002,3 +1002,59 @@ async def test_custom_transaction_name(
         assert transaction_event["type"] == "transaction"
         assert transaction_event["transaction"] == "foobar"
         assert transaction_event["transaction_info"] == {"source": "custom"}
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("send_default_pii", [True, False])
+async def test_user_ip_address_on_all_spans(
+    sentry_init,
+    capture_items,
+    send_default_pii,
+):
+    async def app(scope, receive, send):
+        if scope["type"] == "lifespan":
+            while True:
+                message = await receive()
+                if message["type"] == "lifespan.startup":
+                    await send({"type": "lifespan.startup.complete"})
+                elif message["type"] == "lifespan.shutdown":
+                    await send({"type": "lifespan.shutdown.complete"})
+                    return
+
+        with sentry_sdk.traces.start_span(name="child-span"):
+            pass
+
+        await send(
+            {
+                "type": "http.response.start",
+                "status": 200,
+                "headers": [[b"content-type", b"text/plain"]],
+            }
+        )
+        await send({"type": "http.response.body", "body": b"Hello, world!"})
+
+    sentry_init(
+        send_default_pii=send_default_pii,
+        traces_sample_rate=1.0,
+        _experiments={"trace_lifecycle": "stream"},
+    )
+    sentry_app = SentryAsgiMiddleware(app)
+
+    async def wrapped_app(scope, receive, send):
+        scope["client"] = ("127.0.0.1", 0)
+        await sentry_app(scope, receive, send)
+
+    async with TestClient(wrapped_app) as client:
+        items = capture_items("span")
+        await client.get("/some_url")
+
+    sentry_sdk.flush()
+
+    child_span, server_span = [item.payload for item in items]
+
+    if send_default_pii:
+        assert server_span["attributes"]["user.ip_address"] == "127.0.0.1"
+        assert child_span["attributes"]["user.ip_address"] == "127.0.0.1"
+    else:
+        assert "user.ip_address" not in server_span["attributes"]
+        assert "user.ip_address" not in child_span["attributes"]

tests/integrations/sanic/test_sanic.py

@@ -541,3 +541,47 @@ def test_span_origin(sentry_init, app, capture_events, capture_items, span_strea
     else:
         (_, event) = events
         assert event["contexts"]["trace"]["origin"] == "auto.http.sanic"
+
+
+@pytest.mark.skipif(
+    not PERFORMANCE_SUPPORTED, reason="Performance not supported on this Sanic version"
+)
+@pytest.mark.parametrize("send_default_pii", [True, False])
+def test_user_ip_address_on_all_spans(
+    sentry_init, app, capture_items, send_default_pii
+):
+    app.config.FORWARDED_SECRET = "test"
+
+    @app.route("/child-span")
+    def child_span_handler(request):
+        with sentry_sdk.traces.start_span(name="child-span"):
+            pass
+        return response.text("ok")
+
+    sentry_init(
+        integrations=[SanicIntegration()],
+        default_integrations=False,
+        traces_sample_rate=1.0,
+        send_default_pii=send_default_pii,
+        _experiments={"trace_lifecycle": "stream"},
+    )
+
+    items = capture_items("span")
+
+    c = get_client(app)
+    with c as client:
+        client.get(
+            "/child-span",
+            headers={"Forwarded": "for=127.0.0.1;secret=test"},
+        )
+
+    sentry_sdk.flush()
+
+    child_span, server_span = [item.payload for item in items]
+
+    if send_default_pii:
+        assert server_span["attributes"]["user.ip_address"] == "127.0.0.1"
+        assert child_span["attributes"]["user.ip_address"] == "127.0.0.1"
+    else:
+        assert "user.ip_address" not in server_span["attributes"]
+        assert "user.ip_address" not in child_span["attributes"]

tests/integrations/tornado/test_tornado.py

@@ -527,3 +527,38 @@ def test_span_origin(
     else:
         (_, event) = events
         assert event["contexts"]["trace"]["origin"] == "auto.http.tornado"
+
+
+class ChildSpanHandler(RequestHandler):
+    def get(self):
+        with sentry_sdk.traces.start_span(name="child-span"):
+            pass
+        self.write("ok")
+
+
+@pytest.mark.parametrize("send_default_pii", [True, False])
+def test_user_ip_address_on_all_spans(
+    tornado_testcase, sentry_init, capture_items, send_default_pii
+):
+    sentry_init(
+        integrations=[TornadoIntegration()],
+        traces_sample_rate=1.0,
+        send_default_pii=send_default_pii,
+        _experiments={"trace_lifecycle": "stream"},
+    )
+
+    items = capture_items("span")
+
+    client = tornado_testcase(Application([(r"/hi", ChildSpanHandler)]))
+    client.fetch("/hi")
+
+    sentry_sdk.flush()
+
+    child_span, server_span = [item.payload for item in items]
+
+    if send_default_pii:
+        assert server_span["attributes"]["user.ip_address"] == "127.0.0.1"
+        assert child_span["attributes"]["user.ip_address"] == "127.0.0.1"
+    else:
+        assert "user.ip_address" not in server_span["attributes"]
+        assert "user.ip_address" not in child_span["attributes"]

tests/integrations/wsgi/test_wsgi.py

@@ -841,3 +841,35 @@ def app(environ, start_response):
 )
 def test_get_request_url_x_forwarded_proto(environ, use_x_forwarded_for, expected_url):
     assert get_request_url(environ, use_x_forwarded_for) == expected_url
+
+
+@pytest.mark.parametrize("send_default_pii", [True, False])
+def test_user_ip_address_on_all_spans(sentry_init, capture_items, send_default_pii):
+    def dogpark(environ, start_response):
+        with sentry_sdk.traces.start_span(name="child-span"):
+            pass
+        start_response("200 OK", [])
+        return ["Go get the ball! Good dog!"]
+
+    sentry_init(
+        send_default_pii=send_default_pii,
+        traces_sample_rate=1.0,
+        _experiments={"trace_lifecycle": "stream"},
+    )
+    app = SentryWsgiMiddleware(dogpark)
+    client = Client(app)
+
+    items = capture_items("span")
+
+    client.get("/dogs/are/great/", environ_base={"REMOTE_ADDR": "127.0.0.1"})
+
+    sentry_sdk.flush()
+
+    child_span, server_span = [item.payload for item in items]
+
+    if send_default_pii:
+        assert server_span["attributes"]["user.ip_address"] == "127.0.0.1"
+        assert child_span["attributes"]["user.ip_address"] == "127.0.0.1"
+    else:
+        assert "user.ip_address" not in server_span["attributes"]
+        assert "user.ip_address" not in child_span["attributes"]