57 lines
1.8 KiB
Python
57 lines
1.8 KiB
Python
|
import time
|
||
|
|
from functools import update_wrapper
|
||
|
|
from flask import request, g
|
||
|
|
from reimagine import app, cache
|
||
|
|
|
||
|
|
|
||
|
|
class RateLimit(object):
|
||
|
|
expiration_window = 10
|
||
|
|
|
||
|
|
def __init__(self, key_prefix, limit, per, send_x_headers):
|
||
|
|
self.reset = (int(time.time()) // per) * per + per
|
||
|
|
self.key = key_prefix + str(self.reset)
|
||
|
|
self.limit = limit
|
||
|
|
self.per = per
|
||
|
|
self.send_x_headers = send_x_headers
|
||
|
|
p = cache.pipeline()
|
||
|
|
p.incr(self.key)
|
||
|
|
p.expireat(self.key, self.reset + self.expiration_window)
|
||
|
|
self.current = min(p.execute()[0], limit)
|
||
|
|
|
||
|
|
remaining = property(lambda x: x.limit - x.current)
|
||
|
|
over_limit = property(lambda x: x.current >= x.limit)
|
||
|
|
|
||
|
|
|
||
|
|
def get_view_rate_limit():
|
||
|
|
return getattr(g, '_view_rate_limit', None)
|
||
|
|
|
||
|
|
|
||
|
|
def on_over_limit(limit):
|
||
|
|
return 'You hit the rate limit', 400
|
||
|
|
|
||
|
|
|
||
|
|
def ratelimit(limit, per=300, send_x_headers=True,
|
||
|
|
over_limit=on_over_limit,
|
||
|
|
scope_func=lambda: request.remote_addr,
|
||
|
|
key_func=lambda: request.endpoint):
|
||
|
|
def decorator(f):
|
||
|
|
def rate_limited(*args, **kwargs):
|
||
|
|
key = 'rate-limit/%s/%s/' % (key_func(), scope_func())
|
||
|
|
rlimit = RateLimit(key, limit, per, send_x_headers)
|
||
|
|
g._view_rate_limit = rlimit
|
||
|
|
if over_limit is not None and rlimit.over_limit:
|
||
|
|
return over_limit(rlimit)
|
||
|
|
return f(*args, **kwargs)
|
||
|
|
return update_wrapper(rate_limited, f)
|
||
|
|
return decorator
|
||
|
|
|
||
|
|
|
||
|
|
@app.after_request
|
||
|
|
def inject_x_rate_headers(response):
|
||
|
|
limit = get_view_rate_limit()
|
||
|
|
if limit and limit.send_x_headers:
|
||
|
|
h = response.headers
|
||
|
|
h.add('X-RateLimit-Remaining', str(limit.remaining))
|
||
|
|
h.add('X-RateLimit-Limit', str(limit.limit))
|
||
|
|
h.add('X-RateLimit-Reset', str(limit.reset))
|
||
|
|
return response
|