Flask-Limiter：未认证用户绕过429错误处理教程

from flask import Flask, jsonify
from flask_limiter import Limiter
from flask_limiter.util import get_remote_address
from functools import wraps

app = Flask(__name__)
limiter = Limiter(
    app=app,
    key_func=get_remote_address,
    default_limits=["1 per day", "1 per hour"],
    storage_uri="memory://",
)

def is_authenticated():
    # 你的认证逻辑
    return False

@app.before_request
def check_rate_limit():
    print('Checking rate limit')
    if is_authenticated():
        print('User is authenticated')
        resp = limiter.check()
        if resp and resp[1]:
            return jsonify({"message": "Rate limit exceeded"}), 429
    else:
        print('User not authenticated')
        # 覆盖速率限制响应，当用户未认证时
        return jsonify({"message": "Unauthorized"}), 401

# 自定义装饰器，用于认证请求
def authenticated_request(f):
    @wraps(f)
    def decorated_function(*args, **kwargs):
        if not is_authenticated():
            print('Not authenticated')
            return jsonify({"message": "Unauthorized"}), 401
        return f(*args, **kwargs)
    return decorated_function

@app.route('/example')
@authenticated_request
def example_route():
    return jsonify({"message": "This is an example route"})

if __name__ == '__main__':
    app.run(debug=True)