Merge pull request #1903 from dandi/fix-rate-limiting

Add missing setting for DRF throttle class
dandi · Mar 22, 2024 · 0a3524d · 0a3524d
2 parents c3666bc + c221d7a
commit 0a3524d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/dandiapi/settings.py b/dandiapi/settings.py
@@ -188,6 +188,9 @@ def mutate_configuration(configuration: type[ComposedConfiguration]):
         configuration.INSTALLED_APPS.remove('composed_configuration.sentry.apps.SentryConfig')
 
         # In production, enable rate limiting for unauthenticated users
+        configuration.REST_FRAMEWORK['DEFAULT_THROTTLE_CLASSES'] = [
+            'rest_framework.throttling.AnonRateThrottle',
+        ]
         configuration.REST_FRAMEWORK['DEFAULT_THROTTLE_RATES'] = {
             'anon': '300/minute',
         }