limiter: generate smaller key

inveniosoftware / invenio-app

WSGI, Celery and CLI applications for Invenio flavours.

https://invenio-app.readthedocs.io

MIT License

3 stars 35 forks source link

limiter: generate smaller key #53

Open slint opened 5 years ago

slint commented 5 years ago

Currently the User Agent + IP address of the request is used to generate the rate-limiting key. This can end up being very long because of the User Agent string, thus taking up more space in Redis.

Hashing and base64-encoding the User Agent part of the key would solve this