Flask - Security Best Practices
You want to limit requests per user instead of per IP address in Flask-Limiter. Which key function should you use?
You want to limit requests per user instead of per IP address in Flask-Limiter. Which key function should you use?
hard📝 Application Q9 of 15
Step-by-Step Solution
Solution:
Step 1: Understand key_func role
key_func returns a string to identify the client for rate limiting.Step 2: Use user ID for user-based limits
To limit per user, key_func must return the user's unique ID, not IP.Final Answer:
A custom function that returns the current user's unique ID -> Option AQuick Check:
User-based limit needs user ID key_func [OK]
Quick Trick: Use user ID in key_func for per-user limits [OK]
Common Mistakes:
MISTAKES- Using IP address for user limits
- Returning random values in key_func
- Skipping key_func for user limits
Master "Security Best Practices" in Flask
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Flask Quizzes