rate-limiting

Author: kennethreitz

Pipfile

@@ -7,7 +7,10 @@ gunicorn = "*"
 decorator = "*"
 brotlipy = "*"
 gevent = "*"
+redis = "*"
+hiredis = "*"
 Flask = "*"
+Flask-Limiter = "*"
 
 [packages.raven]
 extras = [ "flask",]

Pipfile.lock

@@ -16,6 +16,8 @@
 import argparse
 
 from flask import Flask, Response, request, render_template, redirect, jsonify as flask_jsonify, make_response, url_for
+from flask_limiter import Limiter
+from flask_limiter.util import get_remote_address
 from six.moves import range as xrange
 from werkzeug.datastructures import WWWAuthenticate, MultiDict
 from werkzeug.http import http_date
@@ -57,6 +59,19 @@ def jsonify(*args, **kwargs):
 if 'SENTRY_DSN' in os.environ:
     sentry = Sentry(app, dsn=os.environ['SENTRY_DSN'])
 
+# Setup rate-limiting.
+if 'REDIS_URL' in os.environ:
+    app.config['RATELIMIT_STORAGE_URL'] = os.environ['REDIS_URL']
+    app.config['RATELIMIT_HEADERS_ENABLED'] = True
+
+    limiter = Limiter(
+        app,
+        key_func=get_remote_address,
+        global_limits=["100000 per day", "10000 per hour"]
+    )
+
+
+
 
 # Set up Bugsnag exception tracking, if desired. To use Bugsnag, install the
 # Bugsnag Python client with the command "pip install bugsnag", and set the