o i@sdZddlZddlmZmZddlmZddlmZddl Z ddl m Z ddl m Z dd lmZmZmZGd d d e ZGd d d ZGdddZGdddeZGdddeZdS)zCRate limiting middleware for protecting FastMCP servers from abuse.N) defaultdictdeque)Callable)Any)McpError) ErrorData)CallNext MiddlewareMiddlewareContextcs(eZdZdZddeffdd ZZS)RateLimitErrorz)Error raised when rate limit is exceeded.Rate limit exceededmessagecsttd|ddS)Ni)coder)super__init__r)selfr __class__m/var/www/html/karishye-ai-python/venv/lib/python3.10/site-packages/fastmcp/server/middleware/rate_limiting.pyrszRateLimitError.__init__)r )__name__ __module__ __qualname____doc__strr __classcell__rrrrr sr c@s6eZdZdZdedefddZd dedefd d Zd S) TokenBucketRateLimiterz.Token bucket implementation for rate limiting.capacity refill_ratecCs*||_||_||_t|_t|_dS)zInitialize token bucket. Args: capacity: Maximum number of tokens in the bucket refill_rate: Tokens added per second N)rrtokenstime last_refillanyioLock_lock)rrrrrrrs  zTokenBucketRateLimiter.__init__rr returnc s|j4IdH>t}||j}t|j|j||j|_||_|j|kr:|j|8_ WdIdHdS WdIdHdS1IdHsLwYdS)zTry to consume tokens from the bucket. Args: tokens: Number of tokens to consume Returns: True if tokens were available and consumed, False otherwise NTF)r%r!r"minrr r)rr nowelapsedrrrconsume&s    0zTokenBucketRateLimiter.consumeN)r) rrrrintfloatrboolr*rrrrrs rc@s0eZdZdZdedefddZdefddZd S) SlidingWindowRateLimiterz+Sliding window rate limiter implementation. max_requestswindow_secondscCs"||_||_t|_t|_dS)zInitialize sliding window rate limiter. Args: max_requests: Maximum requests allowed in the time window window_seconds: Time window in seconds N)r/r0rrequestsr#r$r%)rr/r0rrrr@sz!SlidingWindowRateLimiter.__init__r&c s|j4IdHIt}||j}|jr+|jd|kr+|j|jr+|jd|kst|j|jkrE|j| WdIdHdS WdIdHdS1IdHsWwYdS)zCheck if a request is allowed.NrTF)r%r!r0r1popleftlenr/append)rr(cutoffrrr is_allowedLs    0z#SlidingWindowRateLimiter.is_allowedN)rrrrr+rr-r6rrrrr.=s r.c @sneZdZdZ    ddededBdeegefdBde fd d Z d ed efd dZ d ede d e fddZdS)RateLimitingMiddlewareaKMiddleware that implements rate limiting to prevent server abuse. Uses a token bucket algorithm by default, allowing for burst traffic while maintaining a sustainable long-term rate. Example: ```python from fastmcp.server.middleware.rate_limiting import RateLimitingMiddleware # Allow 10 requests per second with bursts up to 20 rate_limiter = RateLimitingMiddleware( max_requests_per_second=10, burst_capacity=20 ) mcp = FastMCP("MyServer") mcp.add_middleware(rate_limiter) ``` $@NFmax_requests_per_secondburst_capacity get_client_id global_limitcsT|_|p t|d_|_|_tfdd_jr(tjj_dSdS)aInitialize rate limiting middleware. Args: max_requests_per_second: Sustained requests per second allowed burst_capacity: Maximum burst capacity. If None, defaults to 2x max_requests_per_second get_client_id: Function to extract client ID from context. If None, uses global limiting global_limit: If True, apply limit globally; if False, per-client ctjjSN)rr:r9rrrrsz1RateLimitingMiddleware.__init__..N) r9r+r:r;r<rlimitersrglobal_limiter)rr9r:r;r<rr@rrqs  zRateLimitingMiddleware.__init__contextr&cC|jr||SdSz(Get client identifier for rate limiting.globalr;rrDrrr_get_client_identifier z-RateLimitingMiddleware._get_client_identifier call_nextcsh|jr|jIdH}|stdn||}|j|}|IdH}|s-td|||IdHS)z Apply rate limiting to requests.NzGlobal rate limit exceededz Rate limit exceeded for client: )r<rCr*r rJrB)rrDrLallowed client_idlimiterrrr on_requests  z!RateLimitingMiddleware.on_request)r8NNF)rrrrr,r+rr rr-rrJr rrPrrrrr7\s" !r7c @sbeZdZdZ  ddededeegefdBfddZd ed efd d Z d ed e d e fddZ dS)#SlidingWindowRateLimitingMiddlewareaNMiddleware that implements sliding window rate limiting. Uses a sliding window approach which provides more precise rate limiting but uses more memory to track individual request timestamps. Example: ```python from fastmcp.server.middleware.rate_limiting import SlidingWindowRateLimitingMiddleware # Allow 100 requests per minute rate_limiter = SlidingWindowRateLimitingMiddleware( max_requests=100, window_minutes=1 ) mcp = FastMCP("MyServer") mcp.add_middleware(rate_limiter) ``` rNr/window_minutesr;cs,|_|d_|_tfdd_dS)a Initialize sliding window rate limiting middleware. Args: max_requests: Maximum requests allowed in the time window window_minutes: Time window in minutes get_client_id: Function to extract client ID from context <cr>r?)r.r/r0rr@rrrAsz>SlidingWindowRateLimitingMiddleware.__init__..N)r/r0r;rrB)rr/rRr;rr@rrs    z,SlidingWindowRateLimitingMiddleware.__init__rDr&cCrErFrHrIrrrrJrKz:SlidingWindowRateLimitingMiddleware._get_client_identifierrLcsX||}|j|}|IdH}|s%td|jd|jdd|||IdHS)z/Apply sliding window rate limiting to requests.NzRate limit exceeded: z requests per rSz minutes for client: )rJrBr6r r/r0)rrDrLrNrOrMrrrrPs   z.SlidingWindowRateLimitingMiddleware.on_request)rN) rrrrr+rr rrrJr rrPrrrrrQs rQ)rr! collectionsrrcollections.abcrtypingrr#mcpr mcp.typesr middlewarer r r r rr.r7rQrrrrs    'N