U ^g@sdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZmZddlmZddlmZmZddlZddlZddlmZdd lmZmZmZdd lmZmZdd l m!Z!dd l"m#Z#m$Z$d dl%m&Z&d dl'm(Z(m)Z)m*Z*m+Z+d dl,m-Z-d dl.m/Z/d dlm0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;d dlm?Z?m@Z@mAZAejBGdddZCGdddZDGdddZEdS)z Flask-Limiter Extension ) annotationsN) defaultdict)partialwraps) TracebackType)Typeoverload)ConfigurationError) MemoryStorageStoragestorage_from_string) STRATEGIES RateLimiter) OrderedSet) http_date parse_date)request_context)MAX_BACKEND_CHECKS ConfigVarsExemptionScope HeaderNames)RateLimitExceeded) LimitManager) CallableDictListOptionalPRSequenceSetTupleTypeVarUnioncast)get_qualified_name)Limit LimitGroup RequestLimitc@sdeZdZUdZded<ejedZded<eje dZ ded<eje dZ d ed <d d d dZ dS)LimiterContextNOptional[RequestLimit]view_rate_limit)default_factoryList[RequestLimit]view_rate_limitszDict[Limit, List[str]]conditional_deductionszOrderedSet[Limit] seen_limitsNonereturncCs(d|_|j|j|jdSN)r,r/clearr0r1selfr9;/tmp/pip-unpacked-wheel-8ut481ky/flask_limiter/extension.pyreset;s  zLimiterContext.reset)__name__ __module__ __qualname__r,__annotations__ dataclassesfieldlistr/dictr0rr1r;r9r9r9r:r*2s  r*c @seZdZdZddddddddddddddddddddddddddddddddd d d d dd d d d d d ddddd d ddddd ddddddddZdddddZedddd Zdd!ddddddd"dd# d$d%dddd dd dd&d'd(d) d*d+Zdd!ddddddd"d, d$d-d%dddd dd dd&d(d. d/d0Z e e j e j Be jBd1d2d3d2d4d5d6Ze e j e j Be jBd1d7d3d7d4d8d6Ze e j e j Be jBd1d3d9d:d;d6Zdqe j e j Be jBd1dd6Zd?d?d@dAdBZddddCdDdEZdddFdGZdddHdIZdddJdKZedLddMdNZedOddPdQZedRddSdTZedUddVdWZdddXdYZdZdd[d\d]ZdZdZd[d^d_Zddd`dadbZdrdddddcdddedfZddcddgdhdiZdsddddjdkdlZdtdmddndodpZ dS)uLimitera The :class:`Limiter` class initializes the Flask-Limiter extension. :param key_func: a callable that returns the domain to rate limit by. :param app: :class:`flask.Flask` instance to initialize the extension with. :param default_limits: a variable list of strings or callables returning strings denoting default limits to apply to all routes that are not explicitely decorated with a limit. :ref:`ratelimit-string` for more details. :param default_limits_per_method: whether default limits are applied per method, per route or as a combination of all method per route. :param default_limits_exempt_when: a function that should return True/False to decide if the default limits should be skipped :param default_limits_deduct_when: a function that receives the current :class:`flask.Response` object and returns True/False to decide if a deduction should be made from the default rate limit(s) :param default_limits_cost: The cost of a hit to the default limits as an integer or a function that takes no parameters and returns an integer (Default: ``1``). :param application_limits: a variable list of strings or callables returning strings for limits that are applied to the entire application (i.e a shared limit for all routes) :param application_limits_per_method: whether application limits are applied per method, per route or as a combination of all method per route. :param application_limits_exempt_when: a function that should return True/False to decide if the application limits should be skipped :param application_limits_deduct_when: a function that receives the current :class:`flask.Response` object and returns True/False to decide if a deduction should be made from the application rate limit(s) :param application_limits_cost: The cost of a hit to the global application limits as an integer or a function that takes no parameters and returns an integer (Default: ``1``). :param headers_enabled: whether ``X-RateLimit`` response headers are written. :param header_name_mapping: Mapping of header names to use if :paramref:`Limiter.headers_enabled` is ``True``. If no mapping is provided the default values will be used. :param strategy: the strategy to use. Refer to :ref:`ratelimit-strategy` :param storage_uri: the storage location. Refer to :data:`RATELIMIT_STORAGE_URI` :param storage_options: kwargs to pass to the storage implementation upon instantiation. :param auto_check: whether to automatically check the rate limit in the before_request chain of the application. default ``True`` :param swallow_errors: whether to swallow any errors when hitting a rate limit. An exception will still be logged. default ``False`` :param fail_on_first_breach: whether to stop processing remaining limits after the first breach. default ``True`` :param on_breach: a function that will be called when any limit in this extension is breached. If the function returns an instance of :class:`flask.Response` that will be the response embedded into the :exc:`RateLimitExceeded` exception raised. :param meta_limits: a variable list of strings or callables returning strings for limits that are used to control the upper limit of a requesting client hitting any configured rate limit. Once a meta limit is exceeded all subsequent requests will raise a :class:`~flask_limiter.RateLimitExceeded` for the duration of the meta limit window. :param on_meta_breach: a function that will be called when a meta limit in this extension is breached. If the function returns an instance of :class:`flask.Response` that will be the response embedded into the :exc:`RateLimitExceeded` exception raised. :param in_memory_fallback: a variable list of strings or callables returning strings denoting fallback limits to apply when the storage is down. :param in_memory_fallback_enabled: fall back to in memory storage when the main storage is down and inherits the original limits. default ``False`` :param retry_after: Allows configuration of how the value of the `Retry-After` header is rendered. One of `http-date` or `delta-seconds`. :param key_prefix: prefix prepended to rate limiter keys and app context global names. :param request_identifier: a callable that returns the unique identity the current request. Defaults to :attr:`flask.Request.endpoint` :param enabled: Whether the extension is enabled or not NT)appdefault_limitsdefault_limits_per_methoddefault_limits_exempt_whendefault_limits_deduct_whendefault_limits_costapplication_limitsapplication_limits_per_methodapplication_limits_exempt_whenapplication_limits_deduct_whenapplication_limits_costheaders_enabledheader_name_mappingstrategy storage_uristorage_options auto_checkswallow_errorsfail_on_first_breach on_breach meta_limitson_meta_breachin_memory_fallbackin_memory_fallback_enabled retry_after key_prefixrequest_identifierenabledzCallable[[], str]zOptional[flask.Flask]z-Optional[List[Union[str, Callable[[], str]]]]zOptional[bool]Optional[Callable[[], bool]]3Optional[Callable[[flask.wrappers.Response], bool]]z'Optional[Union[int, Callable[[], int]]]z Optional[Dict[HeaderNames, str]] Optional[str]z$Optional[Dict[str, Union[str, int]]]boolEOptional[Callable[[RequestLimit], Optional[flask.wrappers.Response]]]zOptional[List[str]]strzOptional[Callable[..., str]]r2)key_funcrFrGrHrIrJrKrLrMrNrOrPrQrRrSrTrUrVrWrXrYrZr[r\r]r^r_r`rar4c!s|_td_|_d_|_|_|_|_ | _ | _ | _ | _ g_|pf|oft|dk_i_i_g_| _|pi_|_|_|_|pi_|_|_|_|_|_|_|_ |_!|rfdd|Dng}|r fdd|Dng}|r&fdd|Dng_"|rT|D]} j#t$| jdq6d_%d_&d_'d_(d_)t**_+t,_-j.t/t0||iijjd _1|r2|dS) Nz flask-limiterFrcsg|]}t|jdqS)limit_provider key_functionr( _key_func.0limitr7r9r: s z$Limiter.__init__..csg|]}t|jdddqS)globalTrjrkscopesharedrlrnr7r9r:rqscsg|]}t|jdddqS)metaTrsrlrnr7r9r:rqsri)rLrGZdecorated_limitsZblueprint_limitsZroute_exemptionsZblueprint_exemptions)3rFlogging getLoggerloggerra initialized_default_limits_per_method_default_limits_exempt_when_default_limits_deduct_when_default_limits_cost_application_limits_per_method_application_limits_exempt_when_application_limits_deduct_when_application_limits_cost_in_memory_fallbacklen_in_memory_fallback_enabledZ_route_exemptionsZ_blueprint_exemptions_request_filters_headers_enabled_header_mapping _retry_after _strategy _storage_uri_storage_options _auto_check_swallow_errors_fail_on_first_breach _on_breach_on_meta_breachrm _key_prefix_request_identifier _meta_limitsappendr(_storage_limiter _storage_dead_fallback_limiter_Limiter__check_backend_counttime_Limiter__last_check_backendset_marked_for_limiting addHandler NullHandlerr limit_managerinit_app)!r8rhrFrGrHrIrJrKrLrMrNrOrPrQrRrSrTrUrVrWrXrYrZr[r\r]r^r_r`ra_default_limits_application_limitsrpr9r7r:__init__s)         zLimiter.__init__z flask.Flask)rFr4c Cs|j}|tj|j|_|js"dS|jdkr@t|tjd|_|j pP|tj |_ |j pd|tj |_ |j pz|tjd|_ |jdkrt|tjd|_|jdkrt|tjd|_|jdkrt|tjd|_|j|tji|tjd}|s|jstdd}ttt|jp(|f|j|_|j pJ|tj!d|_ |j t"krht#d|j t"|j |j|_$t%j&|j't%j&|tj(t%j&j)t%j*|j't%j*|tj+t%j*j)t%j,|j't%j,|tj-t%j,j)t%j.|j't%j.|tj/t%j.j)i|_'|j0p|tj1|_0|j2p*|tj3d |_2|j4pF|tj5d d |_4|tj6d}|j7pl|tj8d|_7|j9dkrt|tj:d|_9|j;p|tj<|_;|j=p|tj>|_=|j?j@s|r|j?AtB||jCd d|j9|j;|j=|j7d gn@|j?j@}|D]&}|j7|_D|j9|_E|j;|_F|j=|_Gq|j?A||tjHd}|j?jIs|r|j?JtB||jC|j|j |j |j dgn@|j?jI}|D]&}|j|_E|j |_F|j |_G|j |_Dq|j?J||tjKd}|jLs|rtB||jCdddg|_L|jMp|tjNd|_M|jOp |tjPd|_O|Q||j ||jRdtSkrz|jTr\|U|jV|WtXtYjZ||[|j\|jRd]|d|_^dS)zJ :param app: :class:`flask.Flask` instance to rate limit. NFrTa Using the in-memory storage for tracking rate limits as no storage was explicitly specified. This is not recommended for production use. See: https://flask-limiter.readthedocs.io#configuring-a-storage-backend for documentation about configuring the storage backend.z memory://z fixed-windowz!Invalid rate limiting strategy %srEcSs tjjp dS)NrE)flaskrequestendpointr9r9r9r:~z"Limiter.init_app..rr)rjrkrtru per_method exempt_when deduct_whencost)rjrkrrrrrvrslimiter)_config setdefaultrZENABLEDrar{regetZDEFAULT_LIMITS_PER_METHODr|ZDEFAULT_LIMITS_EXEMPT_WHENr}ZDEFAULT_LIMITS_DEDUCT_WHENr~ZDEFAULT_LIMITS_COSTrZSWALLOW_ERRORSrZFAIL_ON_FIRST_BREACHrZHEADERS_ENABLEDrupdateZSTORAGE_OPTIONSZ STORAGE_URIrwarningswarnr%r r rrZSTRATEGYr r rrRESETrZ HEADER_RESETvalue REMAININGZHEADER_REMAININGLIMITZ HEADER_LIMIT RETRY_AFTERZHEADER_RETRY_AFTERrZHEADER_RETRY_AFTER_VALUErZ KEY_PREFIXrZREQUEST_IDENTIFIERZAPPLICATION_LIMITSrZAPPLICATION_LIMITS_COSTrZAPPLICATION_LIMITS_PER_METHODrZAPPLICATION_LIMITS_EXEMPT_WHENrZAPPLICATION_LIMITS_DEDUCT_WHENrrZset_application_limitsr(rmrrrrZDEFAULT_LIMITSrZset_default_limitsZ META_LIMITSrrZ ON_BREACHrZON_META_BREACH_Limiter__configure_fallbacks extensionsrrZbefore_request_check_request_limitZ after_requestrrD_Limiter__inject_headersZteardown_request_Limiter__release_contextaddrz) r8rFrZstorage_uri_from_configZ app_limitsgroupZ conf_limitsZdefault_limit_groupsrZr9r9r:r$sB                            zLimiter.init_appr*r3cCs2t}t|dstt|_ttttf|j|S)aU The context is meant to exist for the lifetime of a request/response cycle per instance of the extension so as to keep track of any state used at different steps in the lifecycle (for example to pass information from the before request hook to the after_request hook) :meta private: _limiter_request_context)rhasattrrr*rr%rrD)r8ctxr9r9r:contexts    zLimiter.contextFr) rhrmethods error_messageroverride_defaultsrrYrrtzUnion[str, Callable[[], str]]Optional[Callable[[], str]]zUnion[int, Callable[[], int]]z*Optional[Union[str, Callable[[str], str]]]LimitDecorator) limit_valuerhrrrrrrrYrrtr4c Cs"t|||d| ||||||| | d S)av Decorator to be used for rate limiting individual routes or blueprints. :param limit_value: rate limit string or a callable that returns a string. :ref:`ratelimit-string` for more details. :param key_func: function/lambda to extract the unique identifier for the rate limit. defaults to remote address of the request. :param per_method: whether the limit is sub categorized into the http method of the request. :param methods: if specified, only the methods in this list will be rate limited (default: ``None``). :param error_message: string (or callable that returns one) to override the error message used in the response. :param exempt_when: function/lambda used to decide if the rate limit should skipped. :param override_defaults: whether the decorated limit overrides the default limits (Default: ``True``). .. note:: When used with a :class:`~flask.Blueprint` the meaning of the parameter extends to any parents the blueprint instance is registered under. For more details see :ref:`recipes:nested blueprints` :param deduct_when: a function that receives the current :class:`flask.Response` object and returns True/False to decide if a deduction should be done from the rate limit :param on_breach: a function that will be called when this limit is breached. If the function returns an instance of :class:`flask.Response` that will be the response embedded into the :exc:`RateLimitExceeded` exception raised. :param cost: The cost of a hit or a function that takes no parameters and returns the cost as an integer (Default: ``1``). :param scope: a string or callable that returns a string for further categorizing the rate limiting scope. This scope is combined with the current endpoint of the request. Changes - .. versionadded:: 2.9.0 The returned object can also be used as a context manager for rate limiting a code block inside a view. For example:: @app.route("/") def route(): try: with limiter.limit("10/second"): # something expensive except RateLimitExceeded: pass FrrrrrrrYrr) r8rrhrrrrrrrYrrtr9r9r:rpsBz Limiter.limit) rhrrrrrrrYrz Union[str, Callable[[str], str]]) rrtrhrrrrrrrYrr4c Cs"t|||d||||||| | | d S)a decorator to be applied to multiple routes sharing the same rate limit. :param limit_value: rate limit string or a callable that returns a string. :ref:`ratelimit-string` for more details. :param scope: a string or callable that returns a string for defining the rate limiting scope. :param key_func: function/lambda to extract the unique identifier for the rate limit. defaults to remote address of the request. :param per_method: whether the limit is sub categorized into the http method of the request. :param methods: if specified, only the methods in this list will be rate limited (default: ``None``). :param error_message: string (or callable that returns one) to override the error message used in the response. :param function exempt_when: function/lambda used to decide if the rate limit should skipped. :param override_defaults: whether the decorated limit overrides the default limits. (default: ``True``) .. note:: When used with a :class:`~flask.Blueprint` the meaning of the parameter extends to any parents the blueprint instance is registered under. For more details see :ref:`recipes:nested blueprints` :param deduct_when: a function that receives the current :class:`flask.Response` object and returns True/False to decide if a deduction should be done from the rate limit :param on_breach: a function that will be called when this limit is breached. If the function returns an instance of :class:`flask.Response` that will be the response embedded into the :exc:`RateLimitExceeded` exception raised. :param cost: The cost of a hit or a function that takes no parameters and returns the cost as an integer (default: ``1``). Trr) r8rrtrhrrrrrrrYrr9r9r: shared_limitAs4zLimiter.shared_limitflagsflask.Blueprintr)objrr4cCsdSr5r9r8rrr9r9r:exemptszLimiter.exemptzCallable[..., R]cCsdSr5r9rr9r9r:rsz_Union[Callable[[Callable[P, R]], Callable[P, R]], Callable[[flask.Blueprint], flask.Blueprint]])rr4cCsdSr5r9)r8rr9r9r:rs z2Optional[Union[Callable[..., R], flask.Blueprint]]zUnion[Callable[..., R], flask.Blueprint, Callable[[Callable[P, R]], Callable[P, R]], Callable[[flask.Blueprint], flask.Blueprint]]csrt|tjrj|jnP|r6jt|n8td}tdt d|ftj}dddfdd }|S|S)a Mark a view function or all views in a blueprint as exempt from rate limits. :param obj: view function or blueprint to mark as exempt. :param flags: Controls the scope of the exemption. By default application wide limits, defaults configured on the extension and meta limits are opted out of. Additional flags can be used to control the behavior when :paramref:`obj` is a Blueprint that is nested under another Blueprint or has other Blueprints nested under it (See :ref:`recipes:nested blueprints`) The method can be used either as a decorator without any arguments (the default flags will apply and the route will be exempt from default and application limits:: @app.route("...") @limiter.exempt def route(...): ... Specific exemption flags can be provided at decoration time:: @app.route("...") @limiter.exempt(flags=ExemptionScope.APPLICATION) def route(...): ... If an entire blueprint (i.e. all routes under it) are to be exempted the method can be called with the blueprint as the first parameter and any additional flags:: bp = Blueprint(...) limiter.exempt(bp) limiter.exempt( bp, flags=ExemptionScope.DEFAULT|ExemptionScope.APPLICATION|ExemptionScope.ANCESTORS ) _R_WO.rr4csj|dS)Nr)r)rrr8r9r:wrapperszLimiter.exempt..wrapper) isinstancer BlueprintrZadd_blueprint_exemptionnameZadd_route_exemptionr&r#r)r8rrrrrr9rr:rs3 zCallable[[], bool])fnr4cCs|j||S)a decorator to mark a function as a filter to be executed to check if the request is exempt from rate limiting. :param fn: The function will be called before evaluating any rate limits to decide whether to perform rate limit or skip it. )rr)r8rr9r9r:request_filters zLimiter.request_filter)rFrSr4cCs|j}|tjd}|tjd}|jsD|rDt||jddddg|_|js^|pZt |jdk|_|jr|t |_ t ||j |_ dS)NFr)rjrkrtrrr)rrrZIN_MEMORY_FALLBACK_ENABLEDZIN_MEMORY_FALLBACKrr(rmrrr Z_fallback_storager r)r8rFrSrZfallback_enabledfallback_limitsr9r9r:Z__configure_fallbackss$  zLimiter.__configure_fallbackscCsJ|jtkrd|_t|jtd|jkrFt|_|jd7_dSdS)NrrTF)rrrrpowr7r9r9r:Z__should_check_backend s  zLimiter.__should_check_backendcCs|jdddS)z Explicitly check the limits for the current request. This is only relevant if the extension was initialized with :paramref:`~flask_limiter.Limiter.auto_check` set to ``False`` :raises: RateLimitExceeded F) in_middlewareN)rr7r9r9r:checks z Limiter.checkcCs@z|j|jdWn tk r:|jdYnXdS)z? resets the storage if it supports being reset z-Storage has been reset and all limits clearedz.This storage type does not support being resetN)storager;ryinfoNotImplementedErrorwarningr7r9r9r:r;"s  z Limiter.resetr cCs|js t|jS)zE The backend storage configured for the rate limiter )rAssertionErrorr7r9r9r:r,s zLimiter.storagercCs&|jr|jr|j}n|j}|s"t|S)zc Instance of the rate limiting strategy used for performing rate limiting. )rrrrr)r8rr9r9r:r4s  zLimiter.limiterr+cCs|jjS)aN Get details for the most relevant rate limit used in this request. In a scenario where multiple rate limits are active for a single request and none are breached, the rate limit which applies to the smallest time window will be returned. .. important:: The value of ``remaining`` in :class:`RequestLimit` is after deduction for the current request. For example:: @limit("1/second") @limit("60/minute") @limit("2/day") def route(...): ... - Request 1 at ``t=0`` (no breach): this will return the details for for ``1/second`` - Request 2 at ``t=1`` (no breach): it will still return the details for ``1/second`` - Request 3 at ``t=2`` (breach): it will return the details for ``2/day`` )rr,r7r9r9r: current_limitAszLimiter.current_limitr.cCs|jjS)z Get a list of all rate limits that were applicable and evaluated within the context of this request. The limits are returned in a sorted order by smallest window size first. )rr/r7r9r9r:current_limits\s zLimiter.current_limitscCs"|jr|jr|jst|SdS)a\ Returns the identity of the request (by default this is the :attr:`flask.Request.endpoint` associated by the view function that is handling the request). The behavior can be customized by initializing the extension with a callable argument for :paramref:`~flask_limiter.Limiter.request_identifier`. rE)rzrarrr7r9r9r:identify_requestgs  zLimiter.identify_requestzflask.wrappers.Response)responser4c Cs|jjD]t\}}|jr ||r z |jj|jf|d|jiWq tk r~}z|j rj|j dn|W5d}~XYq Xq dS)Nrz-Failed to deduct rate limit. Swallowing error) rr0itemsrrhitrpr Exceptionrry exception)r8rlimargserrr9r9r:Z__check_conditional_deductionsts z&Limiter.__check_conditional_deductionsc Cs|||j}|jr|jr|r|jrz|j}|j|jtj t |j j |j|jtj t |j|j|jtjt ||jd}|dk rt|}|dkrtt|}t|tjrt|}tt||}|j|jtjt |jdkr t|nt|tWnltk r}zL|jrd|jsd|j !dd|_|"|}n|j#rz|j $dn|W5d}~XYnX|S)Nz Retry-Afterz http-dateBRate limit storage unreachable - falling back to in-memory storageTz5Failed to update rate limit headers. Swallowing error)%&_Limiter__check_conditional_deductionsrrarrreset_atheadersrrrrgrpamountr remainingrrrrintrdatetimemktime timetuplemaxrrrrrrrryrrrr)r8rZ header_limitrZexisting_retry_after_headerr^er9r9r:Z__inject_headerssn          zLimiter.__inject_headers)rr4cCs>t| p:|jo|j p:|dddkp:tdd|jDS)N.Zstaticcss|] }|VqdSr5r9)rorr9r9r: sz4Limiter.__check_all_limits_exempt..)rerarzsplitanyr)r8rr9r9r:Z__check_all_limits_exempts z!Limiter.__check_all_limits_exemptz List[Limit])r blueprint callable_namerr4c Cs |r |}n$tjj|pdd}|r*t|nd}||rt||j| d|j} | |j_| g|j_d} |jrz || } t| tjjr| } Wn>tk r }z|jr|jd|n|W5d}~XYnXt|| dq>t |dddD]}|j!s,|j"rFq,| |tj j#}| }||g} i}t$| s|j%d|jd q,|j&r|j&f| } |j'r| |jj(|<|jj}n|jj)}|j|d<t||j| d |j}|*|||jf| |s,|j+d |j|||*|| fd|d _,|d }|j-r,qJq,|sz|rzd d|D}|rr|dn|d}|pd|j_||j_d}|D]}t||dj|dd|dj}t./|j0|dj1gD]n}|rz ||} t| tjjr| }Wn@tk r<}z |jr(|jd|n|W5d}~XYnXqҐq|r|D]:}| |tj j#}| }||g} |jj)|jf| qPtt |ddddd|ddS)NrTz,on_meta_breach callback failed with error %s)rcSs|jSr5rpxr9r9r:r)rz+Limiter.__evaluate_limits..)keyzSkipping limit: z". Empty value found in parameters.Fz*ratelimit %s (%s) exceeded at endpoint: %srcSsg|]}|js|qSr9)rurnr9r9r:rqWsz-Limiter.__evaluate_limits..rrz'on_breach callback failed with error %scSs |djS)Nrrrr9r9r:rvr)2rBr r rrMETArZexemption_scoperrrrrhZ scope_forrtestrprr)rurr,r/rrwrappersResponserrryrrsortedZ is_exemptZ method_exemptmethodallerrorrrr0rrrZbreachedrrCfromkeysrrY)r8rrZ failed_limitsZlimit_for_headerZ view_limitsrZrZ limit_keyrtrZbreached_meta_limitZmeta_breach_responseZ cb_responserZ limit_scopekwargsrZ request_limitexplicitZon_breach_responserpcbr9r9r:Z__evaluate_limitss            zLimiter.__evaluate_limits)rrr4c Cs|}z$||tjj||}|||Wntk r}zdt|trL||j r|j s|j dd|_ |j j|j||dn|jr|j dn|W5d}~XYnXdS)NrT)rrz&Failed to rate limit. Swallowing error)r_Limiter__filter_limitsrrr_Limiter__evaluate_limitsrrrrrryrrr1r6rrr)r8rrrZ all_limitsrr9r9r:rzs2   zLimiter._check_request_limitOptional[BaseException])_r4cCs|jdSr5)rr;)r8r#r9r9r:Z__release_contextszLimiter.__release_context)N)F)NT)N)!r<r=r>__doc__rrpropertyrrprrrZ APPLICATIONDEFAULTrrrrr rr;rrrrrrrr r r!rrr9r9r9r:rDBsOL9(W(D   A        G3u rDc@seZdZdZd*dddd d d d d d d dddd ddZeddddZddddZddddddd Ze d!d!d"d#d$Z e d%dd"d&d$Z d'd(d"d)d$Z dS)+rz Wrapper used by :meth:`~flask_limiter.Limiter.limit` and :meth:`~flask_limiter.Limiter.shared_limit` when wrapping view functions or blueprints. NFTrrDzUnion[Callable[[], str], str]rrez*Optional[Union[Callable[[str], str], str]]zOptional[Sequence[str]]rdrbrcrfzUnion[Callable[[], int], int]) rrrhrurtrrrrrrrYrcCszt||_||_|p|jj|_||_||_|r8t|nd|_ ||_ | |_ | |_ | |_ | |_| |_t|j |_||_dSr5)weakrefproxyrrrmrhrtrtuplerrrrrrYrcallableZ is_staticru)r8rrrhrurtrrrrrrrYrr9r9r:rs zLimitDecorator.__init__r(r3cCs8t|j|j|j|j|j|j|j|j|j |j |j |j d S)N) rjrkrtrrrrrrrYrru) r(rrhrtrrrrrrrYrrur7r9r9r: limit_groupszLimitDecorator.limit_groupr2cCsrtjdd}|djd|djd|dj}|jjj||jdd|jj |j ||jj d|ddS) Nrrr:T)overrideFrr) traceback extract_stackfilenamerlinenorradd_decorated_limitr+add_endpoint_hintrr)r8tbZqualified_locationr9r9r: __enter__s &zLimitDecorator.__enter__zOptional[Type[BaseException]]r"zOptional[TracebackType])exc_type exc_valuer/r4cCsdSr5r9)r8r7r8r/r9r9r:__exit__szLimitDecorator.__exit__zCallable[P, R]rcCsdSr5r9r8rr9r9r:__call__szLimitDecorator.__call__rcCsdSr5r9r:r9r9r:r;sz&Union[Callable[P, R], flask.Blueprint]zOptional[Callable[P, R]]csttjrjntttjr>jjjdSjj jj jt ddddfdd }t |dj|SdS)NzP.argszP.kwargsr)akr4csjjrhtddjkshj}|rXtjj|d}|rXt|ksXjj |jj ddt t tj||S)N__wrapper-limiter-instanceFr.)rrgetattrrrrrrr&rr4rr%rZ ensure_sync)r<r=identityr rrr8r9r:Z__inners   z(LimitDecorator.__call__..__innerr>)rrrrr&rrZadd_blueprint_limitr+rrr3rsetattr)r8rZ_LimitDecorator__innerr9rAr:r;s  ) NFNFNNNTNNr) r<r=r>r$rr%r+r6r9rr;r9r9r9r:rs, (!r)Fr$ __future__rr@rr rwrr/rr' collectionsr functoolsrrtypesrtypingrrrZflask.wrappersZ limits.errorsr Zlimits.storager r r Zlimits.strategiesr rZ ordered_setrZ werkzeug.httprr_compatr constantsrrrrerrorsrmanagerrrrrrrrr r!r"r#r$r%utilr&rr'r(r) dataclassr*rDrr9r9r9r:sN        8 d