Step13: 限制接口访问频率

Author: zmrenwu

README.md

@@ -201,6 +201,7 @@ $ git clone https://github.com/HelloGitHub-Team/HelloDjango-REST-framework-tutor
 12. [基于 drf-haystack 实现文章搜索接口](https://www.zmrenwu.com/courses/django-rest-framework-tutorial/materials/101/))
 13. [加缓存为接口提速](https://www.zmrenwu.com/courses/django-rest-framework-tutorial/materials/102/))
 14. [API 版本管理](https://www.zmrenwu.com/courses/django-rest-framework-tutorial/materials/103/))
+15. [限制接口访问频率](https://www.zmrenwu.com/courses/django-rest-framework-tutorial/materials/104/))
 
 ## 公众号
 <p align="center">

blog/views.py

@@ -8,6 +8,7 @@
 from rest_framework.permissions import AllowAny
 from rest_framework.response import Response
 from rest_framework.serializers import DateField
+from rest_framework.throttling import AnonRateThrottle
 from rest_framework_extensions.cache.decorators import cache_response
 from rest_framework_extensions.key_constructor.bits import (
     ListSqlQueryKeyBit,
@@ -199,9 +200,14 @@ def get_queryset(self):
         return Tag.objects.all().order_by("name")
 
 
+class PostSearchAnonRateThrottle(AnonRateThrottle):
+    THROTTLE_RATES = {"anon": "5/min"}
+
+
 class PostSearchView(HaystackViewSet):
     index_models = [Post]
     serializer_class = PostHaystackSerializer
+    throttle_classes = [PostSearchAnonRateThrottle]
 
 
 class ApiVersionTestViewSet(viewsets.ViewSet):

blogproject/settings/common.py

@@ -144,4 +144,9 @@
     # API 版本控制
     "DEFAULT_VERSIONING_CLASS": "rest_framework.versioning.NamespaceVersioning",
     "DEFAULT_VERSION": "v1",
+    # 限流
+    "DEFAULT_THROTTLE_CLASSES": [
+        "rest_framework.throttling.AnonRateThrottle",
+    ],
+    "DEFAULT_THROTTLE_RATES": {"anon": "10/min"},
 }