vws-python-mock 2026.8.4__tar.gz → 2026.8.4.2__tar.gz

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/.github/workflows/test.yml

@@ -59,6 +59,7 @@ jobs:
           - tests/mock_vws/test_authorization_header.py::TestMalformed::test_one_part_with_space
           - tests/mock_vws/test_authorization_header.py::TestMalformed::test_missing_signature
           - tests/mock_vws/test_authorization_header.py::TestBadKey
+          - tests/mock_vws/test_cloud_query_failure_response.py
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_not_integer
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_too_large
           - tests/mock_vws/test_content_length.py::TestIncorrect::test_too_small
@@ -117,6 +118,7 @@ jobs:
           - tests/mock_vws/test_flask_app_usage.py
           - tests/mock_vws/test_model_target_web_api.py
           - tests/mock_vws/test_vumark_generation_api.py
+          - tests/mock_vws/test_vumark_generation_failure.py
           - tests/mock_vws/test_target_validators.py
           - tests/mock_vws/test_docker.py
           - ci/test_custom_linters.py

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/CHANGELOG.rst

@@ -3,19 +3,27 @@ Changelog
 
 .. towncrier release notes start
 
-2026.08.04
-----------
+2026.08.04.2
+------------
+
+- Replace the PyTorch image-quality stack with OpenCV and a lightweight BRISQUE
+  implementation. This reduces dependency download and installation sizes and
+  removes the need to configure PyTorch's CPU-only package index.
+
+- Allow VuMark generation requests to be configured to return ``QuotaExceeded``, ``LicenseCheckFailed``, or ``AuthorizationFailed`` responses.
 
 - Cloud databases with ``request_quota=0`` now return a
   ``RequestQuotaReached`` response from VWS endpoints.
 
 - Add a mock implementation of the Model Target Web API, including OAuth2 token creation, standard and advanced dataset creation, status polling, dataset download, and deletion.
 
-- Improve Model Target Web API mock authentication failure responses.
+- Improve Model Target Web API mock authentication failure responses, including
+  malformed and unsecured JSON Web Token headers.
 
 - Match real Vuforia Model Target dataset creation validation error shape, including per-request UUID, details list, and status codes (415 for unsupported media type, 400 with ``BAD_REQUEST`` validation details).
 
 - Match real Vuforia Model Target unknown-dataset response shape (``NOT_FOUND`` code, ``Could not find a model-view database with uuid <uuid>`` message, ``userId:`` target).
+  Keep each Model Target dataset status response internally consistent when processing completes while the response is being generated.
 
 - Make synthetic Model Target dataset zip downloads byte-for-byte reproducible.
 
@@ -24,6 +32,11 @@ Changelog
 - Add configurable ``TargetQuotaReached``, ``ProjectSuspended``, and
   ``ProjectHasNoAPIAccess`` responses from VWS endpoints.
 
+- Add configurable ``TooManyRequests`` responses from VWS endpoints using the
+  ``CloudDatabase.requests_per_second_limit`` setting.
+
+- Add ``CloudQueryFailureResponse`` and the ``MockVWS.cloud_query_failure_response`` parameter for returning configurable Cloud Query failure status codes, headers, and raw bodies through the ``requests`` and ``httpx`` backends.
+
 2026.04.26
 ----------
 

{vws_python_mock-2026.8.4/src/vws_python_mock.egg-info → vws_python_mock-2026.8.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: vws-python-mock
-Version: 2026.8.4
+Version: 2026.8.4.2
 Summary: A mock for the Vuforia Web Services (VWS) API.
 Author-email: Adam Dangoor <adamdangoor@gmail.com>
 License-Expression: MIT
@@ -20,16 +20,14 @@ License-File: LICENSE
 Requires-Dist: beartype>=0.22.9
 Requires-Dist: flask>=3.0.3
 Requires-Dist: httpx>=0.27.0
-Requires-Dist: numpy>=1.26.4
-Requires-Dist: pillow>=11.0.0
-Requires-Dist: piq>=0.8.0
+Requires-Dist: numpy>=2.4.4
+Requires-Dist: opencv-contrib-python-headless>=5.0.0.93
+Requires-Dist: pillow>=12.2.0
 Requires-Dist: pydantic-settings>=2.6.1
+Requires-Dist: pyteenybrisque>=0.1.1
 Requires-Dist: requests>=2.32.3
 Requires-Dist: responses>=0.25.3
 Requires-Dist: respx>=0.21.0
-Requires-Dist: torch>=2.5.1
-Requires-Dist: torchmetrics>=1.5.1
-Requires-Dist: torchvision>=0.20.1
 Requires-Dist: tzdata; sys_platform == "win32"
 Requires-Dist: vws-auth-tools>=2024.7.12
 Requires-Dist: werkzeug>=3.1.2

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/docs/source/differences-to-vws.rst

@@ -92,7 +92,6 @@ There are some result codes which the mock cannot return.
 These are:
 
 * ``DateRangeError``
-* ``TooManyRequests``
 
 Request quota exhaustion
 ------------------------
@@ -103,10 +102,35 @@ The mock returns ``RequestQuotaReached`` when a
 but the response has not been verified against a real database with an
 exhausted quota.
 
+Configurable Cloud Query failures
+---------------------------------
+
+The Vuforia Cloud Query API documents failure responses with JSON, arbitrary
+content, or no body. Use
+:paramref:`mock_vws.MockVWS.cloud_query_failure_response` to make every Cloud
+Query request return a particular documented failure shape through the
+in-process ``requests`` and ``httpx`` backends::
+
+    from mock_vws import CloudQueryFailureResponse, MockVWS
+
+    failure = CloudQueryFailureResponse(
+        status_code=503,
+        headers={"Content-Type": "text/plain", "Retry-After": "10"},
+        body=b"Temporarily unavailable",
+    )
+
+    with MockVWS(cloud_query_failure_response=failure):
+        # Cloud Query calls return the configured response.
+        ...
+
+The configured response bypasses normal Cloud Query validation and image
+matching. Omitting it preserves the normal successful-query behavior. This
+configuration is not supported by the Flask/Docker backend.
+
 Other configurable result codes
 -------------------------------
 
-The mock also supports three other result codes which have not been verified
+The mock also supports four other result codes which have not been verified
 against real databases in the corresponding states:
 
 * ``TargetQuotaReached`` is returned when adding a target to a
@@ -116,6 +140,11 @@ against real databases in the corresponding states:
   :attr:`mock_vws.states.States.PROJECT_SUSPENDED` state.
 * ``ProjectHasNoAPIAccess`` is returned by VWS endpoints when a database uses
   the :attr:`mock_vws.states.States.PROJECT_HAS_NO_API_ACCESS` state.
+* ``TooManyRequests`` is returned when a
+  :class:`mock_vws.database.CloudDatabase` exceeds its
+  ``requests_per_second_limit``. Set the limit to ``0`` to return this result
+  code for every VWS request. By default, the mock does not apply a per-second
+  request limit.
 
 ``Content-Length`` headers
 --------------------------
@@ -134,7 +163,9 @@ Model Target datasets
 
 The Model Target Web API mock supports OAuth2 token requests, standard and advanced dataset creation, status polling, dataset downloads, and deletion.
 The generated dataset download is a small valid zip file containing request metadata, not a real Vuforia Engine Model Target dataset.
-Model Target API routes require a syntactically JSON Web Token-shaped bearer token, such as the token returned by the mock OAuth2 route.
+Model Target API routes require a three-part JSON Web Token with a JSON object
+header and a non-``none`` ``alg`` value, such as the token returned by the mock
+OAuth2 route.
 The mock does not verify token signatures, claims, expiry, or revocation.
 
 For unknown Model Target datasets, the mock returns an error whose ``target`` is ``userId:mock``.

vws_python_mock-2026.8.4.2/docs/source/installation.rst

@@ -0,0 +1,8 @@
+Installation
+------------
+
+.. code-block:: console
+
+   $ pip install vws-python-mock
+
+This requires Python |minimum-python-version|\+.

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/docs/source/mock-api-reference.rst

@@ -11,6 +11,14 @@ API Reference
    :members:
    :undoc-members:
 
+.. autoclass:: mock_vws.CloudQueryFailureResponse(*, status_code, headers={}, body=b'')
+   :members:
+   :undoc-members:
+
+.. autoclass:: mock_vws.VuMarkGenerationFailure
+   :members:
+   :undoc-members:
+
 .. Many parts of the CloudDatabase API are used for the Flask target
 .. database app, but Python users are not expected to use them.
 .. Therefore, they are not documented.

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/pyproject.toml

@@ -37,16 +37,14 @@ dependencies = [
     "beartype>=0.22.9",
     "flask>=3.0.3",
     "httpx>=0.27.0",
-    "numpy>=1.26.4",
-    "pillow>=11.0.0",
-    "piq>=0.8.0",
+    "numpy>=2.4.4",
+    "opencv-contrib-python-headless>=5.0.0.93",
+    "pillow>=12.2.0",
     "pydantic-settings>=2.6.1",
+    "pyteenybrisque>=0.1.1",
     "requests>=2.32.3",
     "responses>=0.25.3",
     "respx>=0.21.0",
-    "torch>=2.5.1",
-    "torchmetrics>=1.5.1",
-    "torchvision>=0.20.1",
     "tzdata; sys_platform=='win32'",
     "vws-auth-tools>=2024.7.12",
     "werkzeug>=3.1.2",
@@ -145,11 +143,6 @@ version_scheme = "post-release"
 # This must be a PEP 440 compliant version.
 fallback_version = "0.0.0"
 
-[tool.uv]
-sources.torch = { index = "pytorch-cpu" }
-sources.torchvision = { index = "pytorch-cpu" }
-index = [ { name = "pytorch-cpu", url = "https://download.pytorch.org/whl/cpu", explicit = true } ]
-
 [tool.ruff]
 line-length = 79
 lint.select = [
@@ -352,9 +345,6 @@ per_rule_ignores.DEP002 = [
     # tzdata is needed on Windows for zoneinfo to work.
     # See https://docs.python.org/3/library/zoneinfo.html#data-sources.
     "tzdata",
-    # torchvision is used transitively via piq, but must be a direct dependency
-    # so that tool.uv.sources can route it to the CPU-only PyTorch index.
-    "torchvision",
 ]
 optional_dependencies_dev_groups = [
     "dev",

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/__init__.py

@@ -2,8 +2,12 @@
 
 from mock_vws._mock_common import MissingSchemeError
 from mock_vws._requests_mock_server.decorators import MockVWS
+from mock_vws.cloud_query import CloudQueryFailureResponse
+from mock_vws.vumark import VuMarkGenerationFailure
 
 __all__ = [
+    "CloudQueryFailureResponse",
     "MissingSchemeError",
     "MockVWS",
+    "VuMarkGenerationFailure",
 ]

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_flask_server/target_manager.py

@@ -162,6 +162,10 @@ def create_cloud_database() -> Response:
     :reqjson int target_quota: (Optional) The target quota. Once this many
       targets exist, adding another returns ``TargetQuotaReached``.
 
+    :reqjson int requests_per_second_limit: (Optional) The maximum number of
+      VWS requests accepted in a rolling one-second window. Set this to zero
+      to make VWS endpoints return ``TooManyRequests``.
+
     :reqjson string server_access_key: (Optional) The server access key for the
       cloud database.
 
@@ -184,6 +188,9 @@ def create_cloud_database() -> Response:
 
     :resjson int target_quota: The target quota.
 
+    :resjson int requests_per_second_limit: The per-second request limit, or
+      null when rate limiting is disabled.
+
     :resjson string server_access_key: The server access key for the cloud
       database.
 
@@ -234,6 +241,10 @@ def create_cloud_database() -> Response:
         "target_quota",
         random_database.target_quota,
     )
+    requests_per_second_limit = request_json.get(
+        "requests_per_second_limit",
+        random_database.requests_per_second_limit,
+    )
 
     state = States[state_name]
     database_type = DatabaseType[database_type_name]
@@ -248,6 +259,7 @@ def create_cloud_database() -> Response:
         database_type=database_type,
         request_quota=request_quota,
         target_quota=target_quota,
+        requests_per_second_limit=requests_per_second_limit,
     )
     try:
         TARGET_MANAGER.add_cloud_database(cloud_database=database)

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_flask_server/vws.py

@@ -202,6 +202,7 @@ def validate_request() -> None:
         request_method=request.method,
         request_path=request.path,
         databases=get_all_cloud_databases(),
+        request_rate_limiter=TARGET_MANAGER.request_rate_limiter,
     )
 
 
@@ -590,6 +591,7 @@ def generate_vumark_instance(target_id: str) -> Response:
         request_method=request.method,
         request_path=request.path,
         databases=all_databases,
+        request_rate_limiter=TARGET_MANAGER.request_rate_limiter,
     )
 
     database = get_database_matching_server_keys(

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_model_target_web_api.py

@@ -127,6 +127,30 @@ def _basic_auth_credentials(auth_header: str | None) -> tuple[str, str] | None:
     return client_id, client_secret
 
 
+@beartype
+def _jwt_header_error(*, bearer_token: str) -> str | None:
+    """Return the Vuforia error for an invalid JSON Web Token header."""
+    encoded_header = bearer_token.partition(".")[0]
+    try:
+        padding = "=" * (-len(encoded_header) % 4)
+        decoded_header = base64.b64decode(
+            s=encoded_header + padding,
+            altchars=b"-_",
+            validate=True,
+        )
+        header = json.loads(s=decoded_header)
+    except ValueError:
+        header = None
+
+    if not isinstance(header, dict):
+        return "Invalid unsecured/JWS/JWE header: Invalid JSON object"
+    if "alg" not in header:
+        return 'Missing "alg" in header JSON object'
+    if header["alg"] == "none":
+        return "Unsecured (plain) JWTs are rejected, extend class to handle"
+    return None
+
+
 @beartype
 def _require_bearer_token(request: RequestData) -> _ResponseType | None:
     """Return an error response if the request has no bearer token."""
@@ -156,6 +180,15 @@ def _require_bearer_token(request: RequestData) -> _ResponseType | None:
             target="jwt",
             details=None,
         )
+    jwt_header_error = _jwt_header_error(bearer_token=bearer_token)
+    if jwt_header_error is not None:
+        return _error_response(
+            status_code=HTTPStatus.UNAUTHORIZED,
+            code="401",
+            message=jwt_header_error,
+            target="jwt",
+            details=None,
+        )
     return None
 
 

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_requests_mock_server/decorators.py

@@ -14,6 +14,7 @@ from responses import RequestsMock
 
 from mock_vws._mock_common import MissingSchemeError, RequestData
 from mock_vws._respx_mock_server.decorators import start_respx_router
+from mock_vws.cloud_query import CloudQueryFailureResponse
 from mock_vws.database import CloudDatabase, VuMarkDatabase
 from mock_vws.image_matchers import (
     ImageMatcher,
@@ -24,6 +25,7 @@ from mock_vws.target_raters import (
     BrisqueTargetTrackingRater,
     TargetTrackingRater,
 )
+from mock_vws.vumark import VuMarkGenerationFailure
 
 from .mock_web_query_api import MockVuforiaWebQueryAPI
 from .mock_web_services_api import MockVuforiaWebServicesAPI
@@ -51,6 +53,7 @@ class MockVWS(ContextDecorator):
         *,
         base_vws_url: str = "https://vws.vuforia.com",
         base_vwq_url: str = "https://cloudreco.vuforia.com",
+        cloud_query_failure_response: CloudQueryFailureResponse | None = None,
         duplicate_match_checker: ImageMatcher = _STRUCTURAL_SIMILARITY_MATCHER,
         query_match_checker: ImageMatcher = _STRUCTURAL_SIMILARITY_MATCHER,
         processing_time_seconds: float = 2.0,
@@ -58,6 +61,7 @@ class MockVWS(ContextDecorator):
         real_http: bool = False,
         response_delay_seconds: float = 0.0,
         sleep_fn: Callable[[float], None] = time.sleep,
+        vumark_generation_failure: VuMarkGenerationFailure | None = None,
     ) -> None:
         """Route requests to Vuforia's Web Service APIs to fakes of those
         APIs.
@@ -74,6 +78,14 @@ class MockVWS(ContextDecorator):
                 In the real Vuforia Web Services, this is not deterministic.
             base_vwq_url: The base URL for the VWQ API.
             base_vws_url: The base URL for the VWS API.
+            cloud_query_failure_response: A response to return for every Cloud
+                Query request, bypassing normal request validation and image
+                matching. By default, Cloud Query requests are handled
+                normally.
+            vumark_generation_failure: A failure to return for every VuMark
+                generation request, bypassing normal request validation and
+                instance generation. By default, VuMark generation requests
+                are handled normally.
             query_match_checker: A callable which takes two image values and
                 returns whether they will match in a query request.
             duplicate_match_checker: A callable which takes two image values
@@ -109,11 +121,13 @@ class MockVWS(ContextDecorator):
             processing_time_seconds=float(processing_time_seconds),
             duplicate_match_checker=duplicate_match_checker,
             target_tracking_rater=target_tracking_rater,
+            vumark_generation_failure=vumark_generation_failure,
         )
 
         self._mock_vwq_api = MockVuforiaWebQueryAPI(
             target_manager=self._target_manager,
             query_match_checker=query_match_checker,
+            failure_response=cloud_query_failure_response,
         )
 
     def add_cloud_database(self, cloud_database: CloudDatabase) -> None:

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_requests_mock_server/mock_web_query_api.py

@@ -19,12 +19,13 @@ from mock_vws._query_validators import run_query_validators
 from mock_vws._query_validators.exceptions import (
     ValidatorError,
 )
+from mock_vws.cloud_query import CloudQueryFailureResponse
 from mock_vws.image_matchers import ImageMatcher
 from mock_vws.target_manager import TargetManager
 
 _ROUTES: set[Route] = set()
 
-_ResponseType = tuple[int, Mapping[str, str], str]
+_ResponseType = tuple[int, Mapping[str, str], str | bytes]
 _P = ParamSpec("_P")
 
 
@@ -86,13 +87,16 @@ class MockVuforiaWebQueryAPI:
         self,
         target_manager: TargetManager,
         query_match_checker: ImageMatcher,
+        failure_response: CloudQueryFailureResponse | None,
     ) -> None:
         """
         Args:
             target_manager: The target manager which holds all databases.
             query_match_checker: A callable which takes two image values
-        and
+                and
                 returns whether they match.
+            failure_response: A configured failure response which takes
+                precedence over normal query handling.
 
         Attributes:
             routes: The `Route`s to be used in the mock.
@@ -100,10 +104,18 @@ class MockVuforiaWebQueryAPI:
         self.routes = _ROUTES
         self._target_manager = target_manager
         self._query_match_checker = query_match_checker
+        self._failure_response = failure_response
 
     @route(path_pattern="/v1/query", http_methods={HTTPMethod.POST})
     def query(self, request: RequestData) -> _ResponseType:
         """Perform an image recognition query."""
+        if self._failure_response is not None:
+            return (
+                self._failure_response.status_code,
+                self._failure_response.headers,
+                self._failure_response.body,
+            )
+
         try:
             run_query_validators(
                 request_path=request.path,

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_requests_mock_server/mock_web_services_api.py

@@ -49,6 +49,7 @@ from mock_vws.model_target import ModelTargetDatasetType
 from mock_vws.target import ImageTarget
 from mock_vws.target_manager import TargetManager
 from mock_vws.target_raters import TargetTrackingRater
+from mock_vws.vumark import VuMarkGenerationFailure
 
 if TYPE_CHECKING:
     from mock_vws.database import CloudDatabase
@@ -125,6 +126,7 @@ class MockVuforiaWebServicesAPI:
         processing_time_seconds: float,
         duplicate_match_checker: ImageMatcher,
         target_tracking_rater: TargetTrackingRater,
+        vumark_generation_failure: VuMarkGenerationFailure | None,
     ) -> None:
         """
         Args:
@@ -137,6 +139,8 @@ class MockVuforiaWebServicesAPI:
               and returns whether they are duplicates.
             target_tracking_rater: A callable for rating targets for
         tracking.
+            vumark_generation_failure: A configured failure which takes
+                precedence over normal VuMark generation handling.
 
         Attributes:
             routes: The `Route`s to be used in the mock.
@@ -146,6 +150,7 @@ class MockVuforiaWebServicesAPI:
         self._processing_time_seconds = processing_time_seconds
         self._duplicate_match_checker = duplicate_match_checker
         self._target_tracking_rater = target_tracking_rater
+        self._vumark_generation_failure = vumark_generation_failure
 
     @route(path_pattern="/oauth2/token", http_methods={HTTPMethod.POST})
     def oauth2_token(  # pylint: disable=no-self-use
@@ -317,6 +322,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -392,6 +398,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -453,6 +460,28 @@ class MockVuforiaWebServicesAPI:
     )
     def generate_vumark_instance(self, request: RequestData) -> _ResponseType:
         """Generate a VuMark instance."""
+        if self._vumark_generation_failure is not None:
+            body_json = json_dump(
+                body={
+                    "transaction_id": uuid.uuid4().hex,
+                    "result_code": self._vumark_generation_failure.value,
+                }
+            )
+            date = email.utils.formatdate(
+                timeval=None,
+                localtime=False,
+                usegmt=True,
+            )
+            return (
+                self._vumark_generation_failure.status_code,
+                {
+                    "Content-Length": str(object=len(body_json)),
+                    "Content-Type": "application/json",
+                    "Date": date,
+                },
+                body_json,
+            )
+
         valid_accept_types: dict[str, bytes] = {
             "image/png": VUMARK_PNG,
             "image/svg+xml": VUMARK_SVG,
@@ -469,6 +498,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=all_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
 
             database = get_database_matching_server_keys(
@@ -530,6 +560,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -591,6 +622,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -648,6 +680,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -717,6 +750,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -788,6 +822,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text
@@ -902,6 +937,7 @@ class MockVuforiaWebServicesAPI:
                 request_method=request.method,
                 request_path=request.path,
                 databases=self._target_manager.cloud_databases,
+                request_rate_limiter=self._target_manager.request_rate_limiter,
             )
         except ValidatorError as exc:
             return exc.status_code, exc.headers, exc.response_text

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_services_validators/__init__.py

@@ -49,6 +49,10 @@ from .name_validators import (
 )
 from .project_state_validators import validate_project_state
 from .request_quota_validators import validate_request_quota
+from .request_rate_validators import (
+    RequestRateLimiter,
+    validate_request_rate,
+)
 from .target_quota_validators import validate_target_quota
 from .target_validators import validate_target_id_exists
 from .width_validators import validate_width
@@ -62,6 +66,7 @@ def run_services_validators(
     request_body: bytes,
     request_method: str,
     databases: Iterable[AnyDatabase],
+    request_rate_limiter: RequestRateLimiter,
 ) -> None:
     """Run all validators.
 
@@ -71,6 +76,7 @@ def run_services_validators(
         request_body: The body of the request.
         request_method: The HTTP method of the request.
         databases: All Vuforia databases.
+        request_rate_limiter: The rate limiter tracking recent requests.
     """
     validate_auth_header_exists(request_headers=request_headers)
     validate_auth_header_has_signature(request_headers=request_headers)
@@ -92,6 +98,14 @@ def run_services_validators(
         request_path=request_path,
         databases=databases,
     )
+    validate_request_rate(
+        request_headers=request_headers,
+        request_body=request_body,
+        request_method=request_method,
+        request_path=request_path,
+        databases=databases,
+        request_rate_limiter=request_rate_limiter,
+    )
     validate_project_state(
         request_headers=request_headers,
         request_body=request_body,

{vws_python_mock-2026.8.4 → vws_python_mock-2026.8.4.2}/src/mock_vws/_services_validators/exceptions.py

@@ -145,6 +145,37 @@ class RequestQuotaReachedError(ValidatorError):
         }
 
 
+@beartype
+class TooManyRequestsError(ValidatorError):
+    """Exception raised when a database exceeds its request rate limit."""
+
+    def __init__(self) -> None:
+        """Initialize a ``TooManyRequests`` response."""
+        super().__init__()
+        self.status_code = HTTPStatus.TOO_MANY_REQUESTS
+        body = {
+            "transaction_id": uuid.uuid4().hex,
+            "result_code": ResultCodes.TOO_MANY_REQUESTS.value,
+        }
+        self.response_text = json_dump(body=body)
+        date = email.utils.formatdate(
+            timeval=None,
+            localtime=False,
+            usegmt=True,
+        )
+        self.headers = {
+            "Connection": "keep-alive",
+            "Content-Type": "application/json",
+            "server": "envoy",
+            "Date": date,
+            "x-envoy-upstream-service-time": "5",
+            "Content-Length": str(object=len(self.response_text)),
+            "strict-transport-security": "max-age=31536000",
+            "x-aws-region": "us-east-2, us-west-2",
+            "x-content-type-options": "nosniff",
+        }
+
+
 @beartype
 class TargetQuotaReachedError(ValidatorError):
     """Exception raised when a database's target quota is exhausted."""