^fdZddlZddlmZddlmZddlmZGddZ Gdd e Z Gd d e Z Gd d e Z Gdde Z dS)z' Provides various throttling policies. N)cache)ImproperlyConfigured) api_settingsc$eZdZdZdZdZdZdS) BaseThrottlez& Rate throttling of requests. c td)zT Return `True` if the request should be allowed, `False` otherwise. z#.allow_request() must be overriddenNotImplementedErrorselfrequestviews K/var/www/html/env/lib/python3.11/site-packages/rest_framework/throttling.py allow_requestzBaseThrottle.allow_requests""GHHHc|jd}|jd}tj}|W|dks||S|d}|t |t | }|S|r'd|n|S)z Identify the machine making the request by parsing HTTP_X_FORWARDED_FOR if present and number of proxies is > 0. If not use all of HTTP_X_FORWARDED_FOR if it is available, if not use REMOTE_ADDR. HTTP_X_FORWARDED_FOR REMOTE_ADDRNr,) METAgetr NUM_PROXIESsplitminlenstripjoin)r r xff remote_addr num_proxiesaddrs client_addrs r get_identzBaseThrottle.get_idents l566l&&}55 ".  "a3;""IIcNNE[#e**!=!= =>K$$&& &'*;rwwsyy{{### ;rcdS)zm Optionally, return a recommended number of seconds to wait before the next request. Nr s rwaitzBaseThrottle.wait*s trN)__name__ __module__ __qualname____doc__rr$r(r&rrrr sNIII <<<&rrcjeZdZdZeZejZdZdZ e j Z dZ dZdZdZdZd Zd Zd ZdS) SimpleRateThrottlea A simple cache implementation, that only requires `.get_cache_key()` to be overridden. The rate (requests / seconds) is set by a `rate` attribute on the Throttle class. The attribute is a string of the form 'number_of_requests/period'. Period should be one of: ('s', 'sec', 'm', 'min', 'h', 'hour', 'd', 'day') Previous request information used for throttling is stored in the cache. zthrottle_%(scope)s_%(ident)sNct|dds||_||j\|_|_dS)Nrate)getattrget_rater0 parse_rate num_requestsdurationr's r__init__zSimpleRateThrottle.__init__DsFtVT** ( DI+/??49+E+E(4===rc td)z Should return a unique cache-key which can be used for throttling. Must be overridden. May return `None` if the request should not be throttled. z#.get_cache_key() must be overriddenr r s r get_cache_keyz SimpleRateThrottle.get_cache_keyIs""GHHHrct|ddsd|jjz}t| |j|jS#t $rd|jz}t|wxYw)zR Determine the string representation of the allowed request rate. scopeNz9You must set either `.scope` or `.rate` for '%s' throttlez+No default throttle rate set for '%s' scope)r1 __class__r)rTHROTTLE_RATESr:KeyError)r msgs rr2zSimpleRateThrottle.get_rateRstWd++ ,N>*+C&s++ + ,&tz2 2 , , ,?$*LC&s++ + ,s A$A'c|dS|d\}}t|}ddddd|d }||fS) z Given the request rate string, return a two tuple of: , N)NN/<iiQ)smhdr)rint)r r0numperiodr4r5s rr3zSimpleRateThrottle.parse_rateasQ <<jjoo V3xx $U;;F1IFh''rc(|jdS||||_|jdS|j|jg|_||_|jr\|jd|j|jz kr>|j |jr|jd|j|jz k>t|j|j kr| S| S)z Implement the check to see if the request should be throttled. On success calls `throttle_success`. On failure calls `throttle_failure`. NT)r0r8keyrrhistorytimernowr5poprr4throttle_failurethrottle_successr s rrz SimpleRateThrottle.allow_requestms 9 4%%gt44 8 4z~~dh33 ::<<l t|B/48dm3KKK L     l t|B/48dm3KKK t|   1 1 1((** *$$&&&rc|jd|j|j|j|j|jdS)zd Inserts the current request's timestamp along with the key into the cache. rT)rMinsertrOrsetrLr5r's rrRz#SimpleRateThrottle.throttle_successsA Atx((( txt}===trcdS)zP Called when a request to the API has failed due to throttling. Fr&r's rrQz#SimpleRateThrottle.throttle_failures urc|jr|j|j|jdz z }n|j}|jt |jz dz}|dkrdS|t |z S)zG Returns the recommended next request time in seconds. rKrArN)rMr5rOr4rfloat)r remaining_durationavailable_requestss rr(zSimpleRateThrottle.waitsu < /!%$(T\"=M2M!N  !% !.T\1B1BBQF  " "4!E*<$=$===r)r)r*r+r, default_cachertimerN cache_formatr:rDEFAULT_THROTTLE_RATESr<r6r8r2r3rrRrQr(r&rrr.r.2s   E IE1L E!8NFFF III , , , ( ( ('''2 > > > > >rr.ceZdZdZdZdZdS)AnonRateThrottlez Limits the rate of API calls that may be made by a anonymous users. The IP address of the request will be used as the unique cache key. anoncv|jr|jjrdS|j|j||dzSNr:ident)useris_authenticatedr]r:r$r s rr8zAnonRateThrottle.get_cache_keysK < GL9 4 Z^^G,,$ $   rNr)r*r+r,r:r8r&rrr`r`s4 E     rr`ceZdZdZdZdZdS)UserRateThrottlez Limits the rate of API calls that may be made by a given user. The user id will be used as a unique cache key if the user is authenticated. For anonymous requests, the IP address of the request will be used. rfc|jr|jjr |jj}n||}|j|j|dzSrcrfrgpkr$r]r:r r rres rr8zUserRateThrottle.get_cache_keysV < ,GL9 ,LOEENN7++E Z$ $   rNrhr&rrrjrjs4 E      rrjc2eZdZdZdZdZfdZdZxZS)ScopedRateThrottlea, Limits the rate of API calls by different amounts for various parts of the API. Any view that has the `throttle_scope` property set will be throttled. The unique cache key will be generated by concatenating the user id of the request, and the scope of the view being accessed. throttle_scopecdS)Nr&r's rr6zScopedRateThrottle.__init__s  rct||jd|_|jsdS||_||j\|_|_t ||S)NT) r1 scope_attrr:r2r0r3r4r5superr)r r rr;s rrz ScopedRateThrottle.allow_requestssT4?D99 z 4MMOO +/??49+E+E(4=ww$$Wd333rc|jr|jjr |jj}n||}|j|j|dzS)z If `view.throttle_scope` is not set, don't apply this throttle. Otherwise generate the unique cache key by concatenating the user id with the `.throttle_scope` property of the view. rdrlrns rr8z ScopedRateThrottle.get_cache_keysX < ,GL9 ,LOEENN7++E Z$ $   r) r)r*r+r,rtr6rr8 __classcell__)r;s@rrprpsg "J   44444        rrp)r,r\django.core.cacherr[django.core.exceptionsrrest_framework.settingsrrr.r`rjrpr&rrr{s7 444444777777000000########Lp>p>p>p>p>p>p>p>f     )   $     )   ,- - - - - +- - - - - r