""" A utility class which wraps the RateLimitMixin 3rd party class to do bad request counting which can be used for rate limiting """ from django.conf import settings from ratelimitbackend.backends import RateLimitMixin class RequestRateLimiter(RateLimitMixin): """ Use the 3rd party RateLimitMixin to help do rate limiting. """ def is_rate_limit_exceeded(self, request): """ Returns if the client has been rated limited """ counts = self.get_counters(request) return sum(counts.values()) >= self.requests def tick_request_counter(self, request): """ Ticks any counters used to compute when rate limt has been reached """ self.cache_incr(self.get_cache_key(request)) class BadRequestRateLimiter(RequestRateLimiter): """ Default rate limit is 30 requests for every 5 minutes. """ pass class PasswordResetEmailRateLimiter(RequestRateLimiter): """ Rate limiting requests to send password reset emails. """ email_rate_limit = getattr(settings, 'PASSWORD_RESET_EMAIL_RATE_LIMIT', {}) requests = email_rate_limit.get('no_of_emails', 1) cache_timeout_seconds = email_rate_limit.get('per_seconds', 60) reset_email_cache_prefix = 'resetemail' def key(self, request, dt): """ Returns cache key. """ return '%s-%s-%s' % ( self.reset_email_cache_prefix, self.get_ip(request), dt.strftime('%Y%m%d%H%M'), ) def expire_after(self): """ Returns timeout for cache keys. """ return self.cache_timeout_seconds