API: request throttling

denshoproject / encyc-rg

Encyclopedia Resource Guide

Other

0 stars 0 forks source link

API: request throttling #64

Open GeoffFroh opened 6 years ago

GeoffFroh commented 6 years ago

Request-throttling: Access to the REST API is currently completely open, with no use restrictions. The API should be openly-accessible to anonymous users, but cap daily requests to a reasonable number. 10K?

http://www.django-rest-framework.org/api-guide/authentication/

Seealso https://github.com/densho/encyc-front/issues/61 https://github.com/densho/ddr-public/issues/62 https://github.com/densho/ddr-idservice/issues/9

gjost commented 6 years ago

Created separate issue for token-based auth: https://github.com/densho/encyc-rg/issues/66

GeoffFroh commented 3 years ago

Let's set the limit to 500/day

gjost commented 3 years ago

API limit set in ansible-colo commit 4a6f092.