test: ✅ add api rates limit tests

.github/workflows/main-ci.yml

@@ -54,6 +54,7 @@ jobs:
         run: IMAGE_TAG=${{ needs.build-backend.outputs.image_tag }} docker compose -f docker-compose.yml -f docker-compose.ci.yml up -d
       - run: docker compose exec backend coverage run -m pytest
       - run: docker compose exec backend coverage xml --ignore-errors
+      - run: docker compose exec backend locust -f tests/locustfile.py -t 5s --headless -H http://localhost:5000/api
       - name: Produce the coverage report
         uses: insightsengineering/coverage-action@v2
         with:

backend/requirements.txt

@@ -18,4 +18,5 @@ numpy<3.0.0
 # Dev
 pytest==8.3.4
 coverage==7.6.10
-Faker==33.3.0
+Faker==33.3.0
+locust==2.32.5

backend/src/router.py

@@ -36,12 +36,8 @@
 )
 from .utils import get_current_user, send_mail, upload_image
 
-DISABLE_RATE_LIMITS = os.environ.get("DISABLE_RATE_LIMITS", "false").lower() == "true"
-
 router = APIRouter(prefix="/api")
-limiter = Limiter(
-    key_func=get_remote_address if not DISABLE_RATE_LIMITS else lambda: None
-)
+limiter = Limiter(key_func=get_remote_address)
 
 
 @router.get("/", response_class=PlainTextResponse)

backend/tests/locust.conf

@@ -0,0 +1,6 @@
+locustfile = tests/locustfile.py
+headless = true
+host = http://localhost:5000/api
+run-time = 5s
+spawn-rate =
+users = 60

backend/tests/locustfile.py

@@ -0,0 +1,18 @@
+import time
+
+from locust import HttpUser, task
+
+
+class TestLocust(HttpUser):
+    @task
+    def rate_limit_version(self):
+        self.client.get("/version")
+
+    @task
+    def test_upload(self):
+        with open("./tests/images/revolver.jpg", "rb") as f:
+            self.client.post(
+                "/upload",
+                files={"image": f},
+                data={"date": time.time()},
+            )

docker-compose.ci.yml

@@ -1,5 +1,3 @@
 services:
   backend:
     image: ${IMAGE_TAG}
-    environment:
-      - DISABLE_RATE_LIMITS=true