KidZddlZddlmZmZddlmZddlmZddl Z ddl m Z ddl m Z dd lmZmZmZGd d e ZGd d ZGddZGddeZGddeZy)zCRate limiting middleware for protecting FastMCP servers from abuse.N) defaultdictdeque)Callable)Any)McpError) ErrorData)CallNext MiddlewareMiddlewareContextc*eZdZdZddeffd ZxZS)RateLimitErrorz)Error raised when rate limit is exceeded.messagec:t|td|y)Ni)coder)super__init__r)selfr __class__s s/home/jay/workspace/scripts/.codegraph-venv/lib/python3.12/site-packages/fastmcp/server/middleware/rate_limiting.pyrzRateLimitError.__init__s @A)zRate limit exceeded)__name__ __module__ __qualname____doc__strr __classcell__)rs@rrrs3BBBrrc2eZdZdZdedefdZd dedefdZy) TokenBucketRateLimiterz.Token bucket implementation for rate limiting.capacity refill_ratec||_||_||_tj|_t j |_y)zInitialize token bucket. Args: capacity: Maximum number of tokens in the bucket refill_rate: Tokens added per second N)r r!tokenstime last_refillanyioLock_lock)rr r!s rrzTokenBucketRateLimiter.__init__s5! & 99;ZZ\ rr#returncK|j4d{tj}||jz }t|j|j ||j zz|_||_|j |k\r'|xj |zc_ dddd{y dddd{y777 #1d{7swYyxYww)zTry to consume tokens from the bucket. Args: tokens: Number of tokens to consume Returns: True if tokens were available and consumed, False otherwise NTF)r(r$r%minr r#r!)rr#nowelapseds rconsumezTokenBucketRateLimiter.consume&s::  ))+CD,,,GdmmT[[7TEUEU;U-UVDK"D {{f$ v%            scCB?CBC C'C(C-C. C9C:CCCC C CCN)r ) rrrrintfloatrboolr.rrrrs+8 " "5 "Crrc,eZdZdZdedefdZdefdZy)SlidingWindowRateLimiterz+Sliding window rate limiter implementation. max_requestswindow_secondscp||_||_t|_t j |_y)zInitialize sliding window rate limiter. Args: max_requests: Maximum requests allowed in the time window window_seconds: Time window in seconds N)r5r6rrequestsr&r'r()rr5r6s rrz!SlidingWindowRateLimiter.__init__@s*), ZZ\ rr)c K|j4d{tj}||jz }|jrK|jd|kr9|jj |jr|jd|kr9t |j|j kr-|jj| dddd{y dddd{y777 #1d{7swYyxYww)zCheck if a request is allowed.NrTF)r(r$r6r8popleftlenr5append)rr,cutoffs r is_allowedz#SlidingWindowRateLimiter.is_allowedLs::  ))+C4...F--DMM!$4v$= %%'--DMM!$4v$=4==!D$5$55 $$S)           siDC3DA:C9>C9 DC5D!C9" D-C7.D5D7D9D ?D D DN)rrrrr/rr1r>r2rrr4r4=s$5 "S "# " $ rr4c neZdZdZ d dededzdeegefdzde fdZ ded efd Z ded e d e fd Zy)RateLimitingMiddlewareaKMiddleware that implements rate limiting to prevent server abuse. Uses a token bucket algorithm by default, allowing for burst traffic while maintaining a sustainable long-term rate. Example: ```python from fastmcp.server.middleware.rate_limiting import RateLimitingMiddleware # Allow 10 requests per second with bursts up to 20 rate_limiter = RateLimitingMiddleware( max_requests_per_second=10, burst_capacity=20 ) mcp = FastMCP("MyServer") mcp.add_middleware(rate_limiter) ``` Nmax_requests_per_secondburst_capacity get_client_id global_limitc|_|xst|dz_|_|_t fd_jr&tjj_yy)aInitialize rate limiting middleware. Args: max_requests_per_second: Sustained requests per second allowed burst_capacity: Maximum burst capacity. If None, defaults to 2x max_requests_per_second get_client_id: Function to extract client ID from context. If None, uses global limiting global_limit: If True, apply limit globally; if False, per-client cDtjjSN)rrBrArsrz1RateLimitingMiddleware.__init__..s*##T%A%ArN) rAr/rBrCrDrlimitersrglobal_limiter)rrArBrCrDs` rrzRateLimitingMiddleware.__init__qsw(?$,P4Ka4O0P*(|jr|j|Syz(Get client identifier for rate limiting.globalrCrrMs r_get_client_identifierz-RateLimitingMiddleware._get_client_identifier   %%g. .r call_nextc<K|jr/|jjd{}|sStd|j |}|j |}|jd{}|std|||d{S7i7&7w)z Apply rate limiting to requests.NzGlobal rate limit exceededz Rate limit exceeded for client: )rDrLr.rrSrK)rrMrUallowed client_idlimiters r on_requestz!RateLimitingMiddleware.on_requests    //7799G$%ABB33GSlidingWindowRateLimitingMiddleware.__init__..s,T->->@S@STrN)r5r6rCrrK)rr5r]rCs` rrz,SlidingWindowRateLimitingMiddleware.__init__s4),r1*>I T>  rrMr)c>|jr|j|SyrOrQrRs rrSz:SlidingWindowRateLimitingMiddleware._get_client_identifierrTrrUcK|j|}|j|}|jd{}|s+td|jd|j dzd|||d{S7A7w)z/Apply sliding window rate limiting to requests.NzRate limit exceeded: z requests per r_z minutes for client: )rSrKr>rr5r6)rrMrUrXrYrWs rrZz.SlidingWindowRateLimitingMiddleware.on_requests//8 -- ***,, '(9(9':.&&",--B9+O  w'''-(s!4A<A8risaI *$ ??BXB$$N>K(ZK(\=(*=(r