Merge pull request #28 from Mr-Sunglasses/feat/ratelimmiting

Feat/ratelimmiting

Author: Mr-Sunglasses

pdm.lock

@@ -9,6 +9,7 @@ dependencies = [
     "fastapi[all]>=0.104.1",
     "sqlalchemy>=2.0.23",
     "jinja2>=3.1.2",
+    "slowapi>=0.1.8",
 ]
 requires-python = ">=3.10"
 readme = "README.md"

pyproject.toml

@@ -6,9 +6,15 @@
 from fastapi import FastAPI
 from fastapi.templating import Jinja2Templates
 from fastapi.middleware.cors import CORSMiddleware
+from slowapi.errors import RateLimitExceeded
+from slowapi import Limiter, _rate_limit_exceeded_handler
+from slowapi.util import get_remote_address
 from .utils import generate_uuid
 
+limiter = Limiter(key_func=get_remote_address)
 app = FastAPI(title="paste.py 🐍")
+app.state.limiter = limiter
+app.add_exception_handler(RateLimitExceeded, _rate_limit_exceeded_handler)
 
 origins = ["*"]
 
@@ -24,88 +30,97 @@
 
 BASE_DIR = Path(__file__).resolve().parent
 
-templates = Jinja2Templates(directory=str(Path(BASE_DIR, 'templates')))
+templates = Jinja2Templates(directory=str(Path(BASE_DIR, "templates")))
 
 
 @app.post("/file")
-def post_as_a_file(file: UploadFile = File(...)):
+@limiter.limit("100/minute")
+async def post_as_a_file(request: Request, file: UploadFile = File(...)):
     try:
         uuid = generate_uuid()
         if uuid in large_uuid_storage:
             uuid = generate_uuid()
         path = f"data/{uuid}"
-        with open(path, 'wb') as f:
+        with open(path, "wb") as f:
             shutil.copyfileobj(file.file, f)
             large_uuid_storage.append(uuid)
             print(large_uuid_storage)
     except Exception:
         # return {"message": "There was an error uploading the file"}
-        raise HTTPException(detail="There was an error uploading the file",
-                            status_code=status.HTTP_403_FORBIDDEN)
+        raise HTTPException(
+            detail="There was an error uploading the file",
+            status_code=status.HTTP_403_FORBIDDEN,
+        )
     finally:
         file.file.close()
 
     return PlainTextResponse(uuid, status_code=status.HTTP_201_CREATED)
 
 
 @app.get("/paste/{uuid}")
-def post_as_a_text(uuid):
+async def post_as_a_text(uuid):
     path = f"data/{uuid}"
     try:
-        with open(path, 'rb') as f:
+        with open(path, "rb") as f:
             return PlainTextResponse(f.read())
     except Exception as e:
         print(e)
-        raise HTTPException(detail="404: The Requested Resource is not found",
-                            status_code=status.HTTP_404_NOT_FOUND)
+        raise HTTPException(
+            detail="404: The Requested Resource is not found",
+            status_code=status.HTTP_404_NOT_FOUND,
+        )
 
 
 @app.get("/", response_class=HTMLResponse)
-def indexpage(request: Request):
+async def indexpage(request: Request):
     return templates.TemplateResponse("index.html", {"request": request})
 
 
 @app.delete("/paste/{uuid}", response_class=PlainTextResponse)
-def delete_paste(uuid):
+async def delete_paste(uuid):
     path = f"data/{uuid}"
     try:
         os.remove(path)
         return PlainTextResponse(f"File successfully deleted {uuid}")
     except FileNotFoundError:
-        raise HTTPException(detail="File Not Found",
-                            status_code=status.HTTP_404_NOT_FOUND)
+        raise HTTPException(
+            detail="File Not Found", status_code=status.HTTP_404_NOT_FOUND
+        )
     except Exception as e:
         raise HTTPException(
-            detail=f"The exception is {e}", status_code=status.HTTP_409_CONFLICT)
+            detail=f"The exception is {e}", status_code=status.HTTP_409_CONFLICT
+        )
 
 
 @app.get("/web", response_class=HTMLResponse)
-def web(request: Request):
+async def web(request: Request):
     return templates.TemplateResponse("web.html", {"request": request})
 
 
 @app.post("/web", response_class=PlainTextResponse)
-def web_post(content: str = Form(...)):
-    # print(content)
-    # return PlainTextResponse(content=content)
+@limiter.limit("100/minute")
+async def web_post(request: Request, content: str = Form(...)):
     try:
         file_content = content.encode()
         uuid = generate_uuid()
         if uuid in large_uuid_storage:
             uuid = generate_uuid()
         path = f"data/{uuid}"
-        with open(path, 'wb') as f:
+        with open(path, "wb") as f:
             f.write(file_content)
             large_uuid_storage.append(uuid)
     except Exception as e:
-        # return {"message": "There was an error uploading the file"}
         print(e)
-        raise HTTPException(detail="There was an error uploading the file",
-                            status_code=status.HTTP_403_FORBIDDEN)
+        raise HTTPException(
+            detail="There was an error uploading the file",
+            status_code=status.HTTP_403_FORBIDDEN,
+        )
 
-    return RedirectResponse(f"http://paste.fosscu.org/paste/{uuid}", status_code=status.HTTP_303_SEE_OTHER)
+    return RedirectResponse(
+        f"http://paste.fosscu.org/paste/{uuid}", status_code=status.HTTP_303_SEE_OTHER
+    )
 
 
 @app.get("/health", status_code=status.HTTP_200_OK)
-def health() -> dict[str, str]:
+async def health() -> dict[str, str]:
     return {"status": "ok"}