aiwaf 0.1.7.1__py3-none-any.whl → 0.1.7.2__py3-none-any.whl

aiwaf/middleware.py

@@ -101,29 +101,29 @@ class IPAndKeywordBlockMiddleware:
 
 
 class RateLimitMiddleware:
-    WINDOW = 10
-    MAX    = 20
-    FLOOD  = 10
+    WINDOW = 10  # seconds
+    MAX = 20     # soft limit
+    FLOOD = 40   # hard limit
 
     def __init__(self, get_response):
         self.get_response = get_response
-        self.logs = defaultdict(list)
 
     def __call__(self, request):
         if is_exempt_path(request.path):
             return self.get_response(request)
-        ip  = get_ip(request)
-        now = time.time()
-        recs = [t for t in self.logs[ip] if now - t < self.WINDOW]
-        recs.append(now)
-        self.logs[ip] = recs
 
-        if len(recs) > self.MAX:
-            return JsonResponse({"error": "too_many_requests"}, status=429)
-        if len(recs) > self.FLOOD:
+        ip = get_ip(request)
+        key = f"ratelimit:{ip}"
+        now = time.time()
+        timestamps = cache.get(key, [])
+        timestamps = [t for t in timestamps if now - t < self.WINDOW]
+        timestamps.append(now)
+        cache.set(key, timestamps, timeout=self.WINDOW)
+        if len(timestamps) > self.FLOOD:
             BlacklistManager.block(ip, "Flood pattern")
             return JsonResponse({"error": "blocked"}, status=403)
-
+        if len(timestamps) > self.MAX:
+            return JsonResponse({"error": "too_many_requests"}, status=429)
         return self.get_response(request)
 
 

{aiwaf-0.1.7.1.dist-info → aiwaf-0.1.7.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.7.1
+Version: 0.1.7.2
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.7.1.dist-info → aiwaf-0.1.7.2.dist-info}/RECORD

@@ -1,7 +1,7 @@
 aiwaf/__init__.py,sha256=nQFpJ1YpX48snzLjEQCf8zD2YNh8v0b_kPTrXx8uBYc,46
 aiwaf/apps.py,sha256=nCez-Ptlv2kaEk5HenA8b1pATz1VfhrHP1344gwcY1A,142
 aiwaf/blacklist_manager.py,sha256=sM6uTH7zD6MOPGb0kzqV2aFut2vxKgft_UVeRJr7klw,392
-aiwaf/middleware.py,sha256=LTLHmQYIQ36WwfR9FEPLrmTbYgqxIh4X5Aen4VJ-vN0,7350
+aiwaf/middleware.py,sha256=50y13kXr_2oL9dymqncJfNhrCiPsLInWP4aVK1f88Ss,7469
 aiwaf/models.py,sha256=8au1umopgCo0lthztTTRrYRJQUM7uX8eAeXgs3z45K4,1282
 aiwaf/storage.py,sha256=bxCILzzvA1-q6nwclRE8WrfoRhe25H4VrsQDf0hl_lY,1903
 aiwaf/trainer.py,sha256=ir5kFTeLQuhMd2h094ct03Wr-rNZsX-mZHwjLx29F54,6422
@@ -12,8 +12,8 @@ aiwaf/management/commands/detect_and_train.py,sha256=-o-LZ7QZ5GeJPCekryox1DGXKMm
 aiwaf/resources/model.pkl,sha256=rCCXH38SJrnaOba2WZrU1LQVzWT34x6bTVkq20XJU-Q,1091129
 aiwaf/template_tags/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 aiwaf/template_tags/aiwaf_tags.py,sha256=1KGqeioYmgKACDUiPkykSqI7DLQ6-Ypy1k00weWj9iY,399
-aiwaf-0.1.7.1.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
-aiwaf-0.1.7.1.dist-info/METADATA,sha256=aO_1D_qSP_s4vKUj60a8VmsFcCLCyhBZii1tpbo3HqE,5790
-aiwaf-0.1.7.1.dist-info/WHEEL,sha256=pxyMxgL8-pra_rKaQ4drOZAegBVuX-G_4nRHjjgWbmo,91
-aiwaf-0.1.7.1.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
-aiwaf-0.1.7.1.dist-info/RECORD,,
+aiwaf-0.1.7.2.dist-info/licenses/LICENSE,sha256=Ir8PX4dxgAcdB0wqNPIkw84fzIIRKE75NoUil9RX0QU,1069
+aiwaf-0.1.7.2.dist-info/METADATA,sha256=rlLaEQDZMgt5XHWpyt83q3NVZCxtdfpFPnarFBq_EpE,5790
+aiwaf-0.1.7.2.dist-info/WHEEL,sha256=pxyMxgL8-pra_rKaQ4drOZAegBVuX-G_4nRHjjgWbmo,91
+aiwaf-0.1.7.2.dist-info/top_level.txt,sha256=kU6EyjobT6UPCxuWpI_BvcHDG0I2tMgKaPlWzVxe2xI,6
+aiwaf-0.1.7.2.dist-info/RECORD,,