from fastapi import Request from starlette.middleware.base import BaseHTTPMiddleware from app.config import settings from app.core.security import decode_token import redis.asyncio as aioredis import logging from datetime import datetime logger = logging.getLogger(__name__) def get_user_tier_from_token(request: Request) -> str: auth = request.headers.get("Authorization", "") if not auth.startswith("Bearer "): return "anonymous" payload = decode_token(auth[7:]) if not payload: return "anonymous" request.state.user_id = payload.get("sub") request.state.user_tier = payload.get("tier", "free") return request.state.user_tier class TierMiddleware(BaseHTTPMiddleware): async def dispatch(self, request: Request, call_next): if request.url.path.startswith("/api/v1"): tier = get_user_tier_from_token(request) tier_config = { "free": { "max_products": settings.FREE_MAX_PRODUCTS, "max_customers": settings.FREE_MAX_CUSTOMERS, }, "pro": { "max_products": settings.PRO_MAX_PRODUCTS, "max_customers": settings.PRO_MAX_CUSTOMERS, }, "enterprise": { "max_products": 9999, "max_customers": 99999, }, } request.state.tier_config = tier_config.get(tier, tier_config["free"]) else: request.state.user_id = None request.state.user_tier = "anonymous" request.state.tier_config = {} response = await call_next(request) return response class QuotaMiddleware(BaseHTTPMiddleware): async def dispatch(self, request: Request, call_next): if not request.url.path.startswith("/api/v1"): return await call_next(request) if request.state.user_tier in ("anonymous",): return await call_next(request) user_id = request.state.user_id tier = request.state.user_tier if tier == "enterprise": return await call_next(request) path = request.url.path method = request.method if method == "GET": return await call_next(request) quota_map = { "/api/v1/translate": { "free": settings.FREE_DAILY_TRANSLATE_CHARS, "pro": settings.PRO_DAILY_TRANSLATE_CHARS, }, "/api/v1/translate/reply": { "free": settings.FREE_DAILY_REPLIES, "pro": settings.PRO_DAILY_REPLIES, }, "/api/v1/marketing": { "free": settings.FREE_DAILY_MARKETING, "pro": settings.PRO_DAILY_MARKETING, }, "/api/v1/quotations": { "free": settings.FREE_DAILY_QUOTATIONS, "pro": settings.PRO_DAILY_QUOTATIONS, }, } matched_key = None for prefix, limits in quota_map.items(): if path.startswith(prefix): matched_key = prefix break if not matched_key: return await call_next(request) limit = quota_map[matched_key].get(tier) if limit is None: return await call_next(request) try: r = aioredis.from_url(settings.REDIS_URL) key = f"quota:{user_id}:{matched_key}:{datetime.utcnow().strftime('%Y%m%d')}" current = await r.incr(key) await r.expire(key, 86400) if current > limit: from app.core.exceptions import QuotaExceededError raise QuotaExceededError(matched_key) request.state.quota_remaining = limit - current except QuotaExceededError: raise except Exception as e: logger.warning(f"Quota check failed: {e}") return await call_next(request)