feat: default throttles

codeforlife/settings/third_party.py

@@ -22,6 +22,19 @@
         "django_filters.rest_framework.DjangoFilterBackend"
     ],
     "DEFAULT_PAGINATION_CLASS": "codeforlife.pagination.LimitOffsetPagination",
+    "DEFAULT_THROTTLE_CLASSES": [
+        "codeforlife.user.throttles.AnonBurstRateThrottle",
+        "codeforlife.user.throttles.BurstRateThrottle",
+        "codeforlife.user.throttles.AnonSustainedRateThrottle",
+        "codeforlife.user.throttles.SustainedRateThrottle",
+        "rest_framework.throttling.ScopedRateThrottle",
+    ],
+    "DEFAULT_THROTTLE_RATES": {
+        "anon_burst": "60/min",
+        "user_burst": "120/min",
+        "anon_sustained": "10000/day",
+        "user_sustained": "50000/day",
+    },
 }
 
 # Django Extensions - Graph Models

codeforlife/user/throttles/__init__.py

@@ -0,0 +1,7 @@
+"""
+© Ocado Group
+Created on 17/01/2024 at 09:42:34(+00:00).
+"""
+
+from .burst_rate import AnonBurstRateThrottle, BurstRateThrottle
+from .sustained_rate import AnonSustainedRateThrottle, SustainedRateThrottle

codeforlife/user/throttles/burst_rate.py

@@ -0,0 +1,18 @@
+"""
+© Ocado Group
+Created on 17/01/2024 at 09:36:24(+00:00).
+"""
+
+from rest_framework.throttling import AnonRateThrottle, UserRateThrottle
+
+
+class BurstRateThrottle(UserRateThrottle):
+    """Throttles requests sent in bursts from authenticated users."""
+
+    scope = "user_burst"
+
+
+class AnonBurstRateThrottle(AnonRateThrottle):
+    """Throttles requests sent in bursts from anonymous users."""
+
+    scope = "anon_burst"

codeforlife/user/throttles/sustained_rate.py

@@ -0,0 +1,24 @@
+"""
+© Ocado Group
+Created on 17/01/2024 at 09:37:14(+00:00).
+"""
+
+from rest_framework.throttling import AnonRateThrottle, UserRateThrottle
+
+
+class SustainedRateThrottle(UserRateThrottle):
+    """
+    Throttles requests sent over a sustained period of time from authenticated
+    users.
+    """
+
+    scope = "user_sustained"
+
+
+class AnonSustainedRateThrottle(AnonRateThrottle):
+    """
+    Throttles requests sent over a sustained period of time from anonymous
+    users.
+    """
+
+    scope = "anon_sustained"