Too Many Requests
You've exceeded the rate limit. Please try again later.
{% if retry_after %}
You can retry in {{ retry_after }} seconds.
{% endif %}
Return to Home
{% endblock %}
```
### Custom Handler
Define a custom 429 handler in your root URLconf:
```python theme={null}
# urls.py
def handler429(request, exception=None):
"""Custom rate limit exceeded handler."""
from django.shortcuts import render
context = {
'retry_after': getattr(exception, 'retry_after', None),
}
return render(request, '429.html', context, status=429)
# At module level
handler429 = 'myapp.views.handler429'
```
### Headless API Response
For headless/API mode:
```python theme={null}
# Automatically used if HEADLESS_ENABLED = True
{
"status": 429,
"errors": [
{
"code": "rate_limit_exceeded",
"message": "Too many requests. Please try again later."
}
]
}
```
## Testing with Rate Limits
### Disable for Tests
```python theme={null}
# settings_test.py
ACCOUNT_RATE_LIMITS = False # Disable all rate limiting
```
### Test Rate Limit Behavior
```python theme={null}
# tests.py
from django.test import TestCase, override_settings
from allauth.core import ratelimit
class RateLimitTests(TestCase):
@override_settings(ACCOUNT_RATE_LIMITS={"test_action": "3/m/ip"})
def test_rate_limit_enforcement(self):
"""Test that rate limits are enforced."""
# First 3 requests should succeed
for i in range(3):
allowed = ratelimit.consume(
self.client.request().wsgi_request,
action="test_action",
key="test-key"
)
self.assertTrue(allowed)
# 4th request should be rate limited
allowed = ratelimit.consume(
self.client.request().wsgi_request,
action="test_action",
key="test-key"
)
self.assertFalse(allowed)
def test_login_rate_limit(self):
"""Test failed login rate limiting."""
# Attempt failed logins
for i in range(6):
response = self.client.post('/accounts/login/', {
'login': 'testuser',
'password': 'wrongpassword'
})
# Should be rate limited
self.assertEqual(response.status_code, 429)
```
## Monitoring Rate Limits
### Log Rate Limit Events
```python theme={null}
import logging
from allauth.core.exceptions import RateLimited
from django.dispatch import receiver
from django.core.signals import got_request_exception
logger = logging.getLogger(__name__)
@receiver(got_request_exception)
def log_rate_limit_exceptions(sender, request, **kwargs):
"""Log when users hit rate limits."""
import sys
exc_type, exc_value, exc_traceback = sys.exc_info()
if exc_type == RateLimited:
logger.warning(
"Rate limit exceeded",
extra={
'ip': get_client_ip(request),
'user': request.user.id if request.user.is_authenticated else None,
'path': request.path,
}
)
```
### Metrics Collection
```python theme={null}
from allauth.account.adapter import DefaultAccountAdapter
class MetricsAccountAdapter(DefaultAccountAdapter):
def is_ajax(self, request):
"""Override to track rate limit hits."""
from allauth.core import ratelimit
# Before any action, check if rate limited
# (This is simplified - actual implementation varies)
return super().is_ajax(request)
```
## Cache Backend Recommendations
### Redis (Recommended)
```python theme={null}
# settings.py
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.redis.RedisCache',
'LOCATION': 'redis://127.0.0.1:6379/1',
'OPTIONS': {
'CLIENT_CLASS': 'django_redis.client.DefaultClient',
}
}
}
```
**Advantages:**
* ✅ High performance
* ✅ Atomic operations
* ✅ TTL support
* ✅ Distributed (multiple app servers)
### Memcached
```python theme={null}
# settings.py
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.memcached.PyMemcacheCache',
'LOCATION': '127.0.0.1:11211',
}
}
```
**Advantages:**
* ✅ Fast
* ✅ Simple setup
* ✅ Distributed
### Database Cache
```python theme={null}
# settings.py
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.db.DatabaseCache',
'LOCATION': 'cache_table',
}
}
# Create cache table
# python manage.py createcachetable
```
**Use when:**
* ⚠️ No Redis/Memcached available
* ⚠️ Lower traffic requirements
* ✅ Need cache persistence