一、示例展示

=============******=============

            1、BaseThrottle原類

            2、基於使用者IP限制訪問頻率 （瞭解）

            3、基於使用者IP顯示訪問頻率（利於Django快取） # 經常使用

            4、匿名時用IP限制+登入時用Token限制

=============******=============

全域性使用：

in settings.py

REST_FRAMEWORK = {
    'DEFAULT_THROTTLE_CLASSES': [
        'api.utils.throttles.throttles.LuffyAnonRateThrottle',
        'api.utils.throttles.throttles.LuffyUserRateThrottle',
    ],
    'DEFAULT_THROTTLE_RATES': {
        'anon': '10/day',
        'user': '10/day',
        'luffy_anon': '10/m',
        'luffy_user': '20/m',
    },
}
 

1、BaseThrottle原類

class BaseThrottle(object):
	"""
    Rate throttling of requests.
    """

    def allow_request(self, request, view): #判斷是否允許請求，來訪問 
        """
        Return `True` if the request should be allowed, `False` otherwise.
        """
        raise NotImplementedError('.allow_request() must be overridden')

    def get_ident(self, request):  # 獲取請求的IP，
        xff = request.META.get('HTTP_X_FORWARDED_FOR')
        remote_addr = request.META.get('REMOTE_ADDR')
        num_proxies = api_settings.NUM_PROXIES

        if num_proxies is not None:
            if num_proxies == 0 or xff is None:
                return remote_addr
            addrs = xff.split(',')
            client_addr = addrs[-min(num_proxies, len(addrs))]
            return client_addr.strip()

        return ''.join(xff.split()) if xff else remote_addr

    def wait(self):  # 等待時間設定
        """
        Optionally, return a recommended number of seconds to wait before
        the next request.
        """
        return None
 

2、基於使用者IP限制訪問頻率 （瞭解）

in  url.py
	from django.conf.urls import url, include
	from web.views import TestView

	urlpatterns = [
	    url(r'^test/', TestView.as_view()),
	]
in views.py
	#!/usr/bin/env python
	# -*- coding:utf-8 -*-
	import time
	from rest_framework.views import APIView
	from rest_framework.response import Response

	from rest_framework import exceptions
	from rest_framework.throttling import BaseThrottle
	from rest_framework.settings import api_settings

	# 儲存訪問記錄
	RECORD = {
	    '使用者IP': [12312139, 12312135, 12312133, ]
	}


	class TestThrottle(BaseThrottle):
            '''仿照SimpleRateThrottle這個類，做簡單化處理，看懂後在看SimpleRateThrottle就很簡單了'''
	    ctime = time.time

	    def get_ident(self, request):
	        """
	        根據使用者IP和代理IP，當做請求者的唯一IP
	        """
	        xff = request.META.get('HTTP_X_FORWARDED_FOR')
	        remote_addr = request.META.get('REMOTE_ADDR')
	        num_proxies = api_settings.NUM_PROXIES

	        if num_proxies is not None:
	            if num_proxies == 0 or xff is None:
	                return remote_addr
	            addrs = xff.split(',')
	            client_addr = addrs[-min(num_proxies, len(addrs))]
	            return client_addr.strip()

	        return ''.join(xff.split()) if xff else remote_addr

	    def allow_request(self, request, view):
	        """
	        是否仍然在允許範圍內
	        :return: True，表示可以通過；False表示已超過限制，不允許訪問
	        """
	        # 獲取使用者唯一標識（如：IP）

	        # 允許一分鐘訪問10次
	        num_request = 10
	        time_request = 60

	        now = self.ctime()
	        ident = self.get_ident(request)
	        self.ident = ident
	        if ident not in RECORD:
	            RECORD[ident] = [now, ]
	            return True
	        history = RECORD[ident]
	        while history and history[-1] <= now - time_request:
	            history.pop()
	        if len(history) < num_request:
	            history.insert(0, now)
	            return True

	    def wait(self):
	        """
	        多少秒後可以允許繼續訪問
	        """
	        last_time = RECORD[self.ident][0]
	        now = self.ctime()
	        return int(60 + last_time - now)


	class TestView(APIView):
	    throttle_classes = [TestThrottle, ]

	    def get(self, request, *args, **kwargs):
	        # self.dispatch
	        print(request.user)
	        print(request.auth)
	        return Response('GET請求，響應內容')

	    def post(self, request, *args, **kwargs):
	        return Response('POST請求，響應內容')

	    def put(self, request, *args, **kwargs):
	        return Response('PUT請求，響應內容')

	    def throttled(self, request, wait):
	        """
	        訪問次數被限制時，定製錯誤資訊
	        """

	        class Throttled(exceptions.Throttled):
	            default_detail = '請求被限制.'
	            extra_detail_singular = '請 {wait} 秒之後再重試.'
	            extra_detail_plural = '請 {wait} 秒之後再重試.'

	        raise Throttled(wait)
 

3、基於使用者IP顯示訪問頻率（利於Django快取） # 經常使用

in settings.py
	REST_FRAMEWORK = {
    'DEFAULT_THROTTLE_RATES': {
        'test_scope': '10/m',  # s 秒  h 小時 d 天 m 分鐘 等等 原始碼通過/切割，判斷右邊首位是什麼來判斷時間單位
    },
}

in url.py
	from django.conf.urls import url, include
	from web.views import TestView

	urlpatterns = [
	    url(r'^test/', TestView.as_view()),
	]

in  views.py
	#!/usr/bin/env python
	# -*- coding:utf-8 -*-
	from rest_framework.views import APIView
	from rest_framework.response import Response

	from rest_framework import exceptions
	from rest_framework.throttling import SimpleRateThrottle


	class TestThrottle(SimpleRateThrottle):

	    scope = 'test_scope'   # 顯示頻率的Key,在配置檔案裡需要有個跟這個同名

	    def get_cache_key(self, request, view):
	        return self.get_ident(request) # 獲取請求IP


	class TestView(APIView):
	    throttle_classes = [TestThrottle, ]

	    def get(self, request, *args, **kwargs):
	        # self.dispatch
	        print(request.user)
	        print(request.auth)
	        return Response('GET請求，響應內容')

	    def post(self, request, *args, **kwargs):
	        return Response('POST請求，響應內容')

	    def put(self, request, *args, **kwargs):
	        return Response('PUT請求，響應內容')

	    def throttled(self, request, wait):
	        """
	        訪問次數被限制時，定製錯誤資訊
	        """

	        class Throttled(exceptions.Throttled):
	            default_detail = '請求被限制.'
	            extra_detail_singular = '請 {wait} 秒之後再重試.'
	            extra_detail_plural = '請 {wait} 秒之後再重試.'

	        raise Throttled(wait)

in settings.py
	REST_FRAMEWORK = {
	    'UNAUTHENTICATED_USER': None,
	    'UNAUTHENTICATED_TOKEN': None,
	    'DEFAULT_THROTTLE_RATES': {
	        'luffy_anon': '10/m',
	        'luffy_user': '20/m',
	    },
	}
in url.py
	from django.conf.urls import url, include
	from web.views.s3_throttling import TestView

	urlpatterns = [
	    url(r'^test/', TestView.as_view()),
	]
in views.py
	#!/usr/bin/env python
	# -*- coding:utf-8 -*-
	from rest_framework.views import APIView
	from rest_framework.response import Response

	from rest_framework.throttling import SimpleRateThrottle


	class LuffyAnonRateThrottle(SimpleRateThrottle):
	    """
	    匿名使用者，根據IP進行限制
	    """
	    scope = "luffy_anon"

	    def get_cache_key(self, request, view):
	        # 使用者已登入，則跳過 匿名頻率限制
	        if request.user:
	            return None

	        return self.cache_format % {
	            'scope': self.scope,
	            'ident': self.get_ident(request)
	        }


	class LuffyUserRateThrottle(SimpleRateThrottle):
	    """
	    登入使用者，根據使用者token限制
	    """
	    scope = "luffy_user"

	    def get_ident(self, request):
	        """
	        認證成功時：request.user是使用者物件；request.auth是token物件
	        :param request: 
	        :return: 
	        """
	        # return request.auth.token
	        return "user_token"

	    def get_cache_key(self, request, view):
	        """
	        獲取快取key
	        :param request: 
	        :param view: 
	        :return: 
	        """
	        # 未登入使用者，則跳過 Token限制
	        if not request.user:
	            return None

	        return self.cache_format % {
	            'scope': self.scope,
	            'ident': self.get_ident(request)
	        }


	class TestView(APIView):
	    throttle_classes = [LuffyUserRateThrottle, LuffyAnonRateThrottle, ]

	    def get(self, request, *args, **kwargs):
	        # self.dispatch
	        print(request.user)
	        print(request.auth)
	        return Response('GET請求，響應內容')

	    def post(self, request, *args, **kwargs):
	        return Response('POST請求，響應內容')

	    def put(self, request, *args, **kwargs):
	        return Response('PUT請求，響應內容')