2011-06-14 14:08:29 +04:00
|
|
|
"""
|
|
|
|
Tests for the throttling implementations in the permissions module.
|
|
|
|
"""
|
2011-06-11 01:53:32 +04:00
|
|
|
|
2011-04-27 21:08:32 +04:00
|
|
|
from django.test import TestCase
|
2011-06-11 01:53:32 +04:00
|
|
|
from django.contrib.auth.models import User
|
2011-06-11 03:49:22 +04:00
|
|
|
from django.core.cache import cache
|
2011-04-27 21:08:32 +04:00
|
|
|
|
|
|
|
from djangorestframework.compat import RequestFactory
|
2011-05-24 13:27:24 +04:00
|
|
|
from djangorestframework.views import View
|
2011-06-13 22:42:37 +04:00
|
|
|
from djangorestframework.permissions import PerUserThrottling, PerViewThrottling, PerResourceThrottling
|
2011-06-11 22:21:24 +04:00
|
|
|
from djangorestframework.resources import FormResource
|
2011-04-27 21:08:32 +04:00
|
|
|
|
2011-05-24 13:27:24 +04:00
|
|
|
class MockView(View):
|
2011-05-10 13:49:28 +04:00
|
|
|
permissions = ( PerUserThrottling, )
|
2011-06-15 17:41:09 +04:00
|
|
|
throttle = '3/sec'
|
2011-06-11 05:16:35 +04:00
|
|
|
|
|
|
|
def get(self, request):
|
|
|
|
return 'foo'
|
|
|
|
|
2011-06-15 17:41:09 +04:00
|
|
|
class MockView_PerViewThrottling(MockView):
|
2011-06-11 22:21:24 +04:00
|
|
|
permissions = ( PerViewThrottling, )
|
2011-04-27 21:08:32 +04:00
|
|
|
|
2011-06-15 17:41:09 +04:00
|
|
|
class MockView_PerResourceThrottling(MockView):
|
2011-06-11 22:21:24 +04:00
|
|
|
permissions = ( PerResourceThrottling, )
|
|
|
|
resource = FormResource
|
2011-06-13 22:42:37 +04:00
|
|
|
|
2011-06-15 17:41:09 +04:00
|
|
|
class MockView_MinuteThrottling(MockView):
|
|
|
|
throttle = '3/min'
|
|
|
|
|
|
|
|
|
2011-06-11 22:21:24 +04:00
|
|
|
|
2011-06-11 01:53:32 +04:00
|
|
|
class ThrottlingTests(TestCase):
|
|
|
|
urls = 'djangorestframework.tests.throttling'
|
|
|
|
|
|
|
|
def setUp(self):
|
2011-06-13 22:42:37 +04:00
|
|
|
"""
|
|
|
|
Reset the cache so that no throttles will be active
|
|
|
|
"""
|
2011-06-11 03:49:22 +04:00
|
|
|
cache.clear()
|
2011-06-11 22:21:24 +04:00
|
|
|
self.factory = RequestFactory()
|
2011-06-11 01:53:32 +04:00
|
|
|
|
|
|
|
def test_requests_are_throttled(self):
|
2011-06-13 22:42:37 +04:00
|
|
|
"""
|
|
|
|
Ensure request rate is limited
|
|
|
|
"""
|
2011-06-11 22:21:24 +04:00
|
|
|
request = self.factory.get('/')
|
|
|
|
for dummy in range(4):
|
|
|
|
response = MockView.as_view()(request)
|
2011-06-11 05:16:35 +04:00
|
|
|
self.assertEqual(503, response.status_code)
|
2011-06-11 01:53:32 +04:00
|
|
|
|
2011-06-13 22:42:37 +04:00
|
|
|
def set_throttle_timer(self, view, value):
|
|
|
|
"""
|
|
|
|
Explicitly set the timer, overriding time.time()
|
|
|
|
"""
|
|
|
|
view.permissions[0].timer = lambda self: value
|
|
|
|
|
2011-06-11 01:53:32 +04:00
|
|
|
def test_request_throttling_expires(self):
|
2011-06-14 14:08:29 +04:00
|
|
|
"""
|
|
|
|
Ensure request rate is limited for a limited duration only
|
|
|
|
"""
|
2011-06-13 22:42:37 +04:00
|
|
|
self.set_throttle_timer(MockView, 0)
|
2011-06-14 14:08:29 +04:00
|
|
|
|
2011-06-11 22:21:24 +04:00
|
|
|
request = self.factory.get('/')
|
|
|
|
for dummy in range(4):
|
|
|
|
response = MockView.as_view()(request)
|
2011-06-11 01:53:32 +04:00
|
|
|
self.assertEqual(503, response.status_code)
|
2011-06-14 14:08:29 +04:00
|
|
|
|
|
|
|
# Advance the timer by one second
|
2011-06-13 22:42:37 +04:00
|
|
|
self.set_throttle_timer(MockView, 1)
|
2011-06-14 14:08:29 +04:00
|
|
|
|
2011-06-11 22:21:24 +04:00
|
|
|
response = MockView.as_view()(request)
|
2011-06-11 01:53:32 +04:00
|
|
|
self.assertEqual(200, response.status_code)
|
2011-06-11 22:21:24 +04:00
|
|
|
|
2011-06-11 22:29:01 +04:00
|
|
|
def ensure_is_throttled(self, view, expect):
|
2011-06-11 22:21:24 +04:00
|
|
|
request = self.factory.get('/')
|
|
|
|
request.user = User.objects.create(username='a')
|
|
|
|
for dummy in range(3):
|
2011-06-13 22:42:37 +04:00
|
|
|
view.as_view()(request)
|
2011-06-11 22:21:24 +04:00
|
|
|
request.user = User.objects.create(username='b')
|
|
|
|
response = view.as_view()(request)
|
2011-06-11 22:29:01 +04:00
|
|
|
self.assertEqual(expect, response.status_code)
|
2011-06-11 22:21:24 +04:00
|
|
|
|
|
|
|
def test_request_throttling_is_per_user(self):
|
2011-06-13 22:42:37 +04:00
|
|
|
"""
|
|
|
|
Ensure request rate is only limited per user, not globally for
|
|
|
|
PerUserThrottles
|
|
|
|
"""
|
2011-06-11 22:29:01 +04:00
|
|
|
self.ensure_is_throttled(MockView, 200)
|
2011-06-11 22:21:24 +04:00
|
|
|
|
|
|
|
def test_request_throttling_is_per_view(self):
|
2011-06-13 22:42:37 +04:00
|
|
|
"""
|
|
|
|
Ensure request rate is limited globally per View for PerViewThrottles
|
|
|
|
"""
|
2011-06-15 17:41:09 +04:00
|
|
|
self.ensure_is_throttled(MockView_PerViewThrottling, 503)
|
2011-06-11 22:21:24 +04:00
|
|
|
|
|
|
|
def test_request_throttling_is_per_resource(self):
|
2011-06-13 22:42:37 +04:00
|
|
|
"""
|
|
|
|
Ensure request rate is limited globally per Resource for PerResourceThrottles
|
|
|
|
"""
|
2011-06-15 17:41:09 +04:00
|
|
|
self.ensure_is_throttled(MockView_PerResourceThrottling, 503)
|
2011-06-13 22:42:37 +04:00
|
|
|
|
|
|
|
|
|
|
|
def ensure_response_header_contains_proper_throttle_field(self, view, expected_headers):
|
|
|
|
"""
|
|
|
|
Ensure the response returns an X-Throttle field with status and next attributes
|
|
|
|
set properly.
|
|
|
|
"""
|
|
|
|
request = self.factory.get('/')
|
2011-06-15 17:41:09 +04:00
|
|
|
for timer, expect in expected_headers:
|
|
|
|
self.set_throttle_timer(view, timer)
|
2011-06-13 22:42:37 +04:00
|
|
|
response = view.as_view()(request)
|
|
|
|
self.assertEquals(response['X-Throttle'], expect)
|
|
|
|
|
|
|
|
def test_seconds_fields(self):
|
|
|
|
"""
|
|
|
|
Ensure for second based throttles.
|
|
|
|
"""
|
|
|
|
self.ensure_response_header_contains_proper_throttle_field(MockView,
|
2011-06-15 17:41:09 +04:00
|
|
|
((0, 'status=SUCCESS; next=0.33 sec'),
|
|
|
|
(0, 'status=SUCCESS; next=0.50 sec'),
|
|
|
|
(0, 'status=SUCCESS; next=1.00 sec'),
|
|
|
|
(0, 'status=FAILURE; next=1.00 sec')
|
2011-06-13 22:42:37 +04:00
|
|
|
))
|
|
|
|
|
|
|
|
def test_minutes_fields(self):
|
|
|
|
"""
|
|
|
|
Ensure for minute based throttles.
|
|
|
|
"""
|
2011-06-15 17:41:09 +04:00
|
|
|
self.ensure_response_header_contains_proper_throttle_field(MockView_MinuteThrottling,
|
|
|
|
((0, 'status=SUCCESS; next=20.00 sec'),
|
|
|
|
(0, 'status=SUCCESS; next=30.00 sec'),
|
|
|
|
(0, 'status=SUCCESS; next=60.00 sec'),
|
|
|
|
(0, 'status=FAILURE; next=60.00 sec')
|
|
|
|
))
|
|
|
|
|
|
|
|
def test_next_rate_remains_constant_if_followed(self):
|
|
|
|
"""
|
|
|
|
If a client follows the recommended next request rate,
|
|
|
|
the throttling rate should stay constant.
|
|
|
|
"""
|
|
|
|
self.ensure_response_header_contains_proper_throttle_field(MockView_MinuteThrottling,
|
|
|
|
((0, 'status=SUCCESS; next=20.00 sec'),
|
|
|
|
(20, 'status=SUCCESS; next=20.00 sec'),
|
|
|
|
(40, 'status=SUCCESS; next=20.00 sec'),
|
|
|
|
(60, 'status=SUCCESS; next=20.00 sec'),
|
|
|
|
(80, 'status=SUCCESS; next=20.00 sec')
|
2011-06-13 22:42:37 +04:00
|
|
|
))
|