djblets.auth.ratelimit¶
Utilities for rate-limiting login attempts.
- DEFAULT_API_ANONYMOUS_LIMIT_RATE = '1000/h'[source]¶
The default rate limit for anonymous API requests.
- DEFAULT_API_AUTHENTICATED_LIMIT_RATE = '10000/h'[source]¶
The default rate limit for authenticated API requests.
- get_user_id_or_ip(request)[source]¶
Return the user’s ID or IP address from the given HTTP request.
- Parameters:
request (
django.http.HttpRequest) – The HTTP request from the client.- Returns:
If the user is authenticated, the user ID will be returned. Otherwise, the IP address of the client is returned instead.
- Return type:
- is_ratelimited(request, increment=False, limit_type=0)[source]¶
Check whether the user or IP address has exceeded the rate limit.
The parameters are used to create a new key or fetch an existing key to save or update to the cache and to determine the amount of time period left.
- Parameters:
request (
django.http.HttpRequest) – The HTTP request from the client.increment (
bool, optional) – Whether the number of login attempts should be incremented.limit_type (
int, optional) – The type of rate limit to check.
- Returns:
Whether the current user has exceeded the rate limit of login attempts.
- Return type:
- get_usage_count(request, increment=False, limit_type=0)[source]¶
Return rate limit status for a given user or IP address.
This method performs validation checks on the input parameters and creates the cache key to keep track of the number of login attempts made by the user. It saves the new cache key and initial number of attempts or updates the existing cache key and number of attempts before returning the count, limit, and time_left.
- Parameters:
request (
django.http.HttpRequest) – The HTTP request from the client.increment (
bool, optional) – Whether the number of login attempts should be incremented.limit_type (
int, optional) – The type of rate limit to check.
- Returns:
A dictionary with the following keys:
- Return type:
- class Rate(count, seconds)[source]¶
Bases:
objectA rate representing login attempt frequency.
The main functionality of this class is found in the
parse()function. This class converts a rate into a Rate object, which contains the number of login attempts allowed within a time period based on a given rate string.- RATE_RE = re.compile('(\\d+)/(\\d*)([smhd])?')[source]¶
Regular expression that interprets the rate string.
- classmethod parse(rate_str)[source]¶
Return a Rate parsed from the given rate string.
Converts the given rate string into a Rate object, which contains the number of login attempts allowed (count) and the time period alotted for these attempts (seconds).
- __init__(count, seconds)[source]¶
Initialize attributes for the Rate object.
This initializes the number of failed login attempts allowed, and the time period for the login attempts in seconds based on the data returned from the parse() function.
- __eq__(other)[source]¶
Return whether the two Rate instances are equal.
- Returns:
Return true if the count and seconds match.
- Return type:
- __hash__ = None¶