Update app.py

app.py

@@ -14,6 +14,9 @@ from urllib.parse import quote
 from pathlib import Path
 import uuid
 from fastapi import BackgroundTasks
+from collections import defaultdict
+import time
+from datetime import timedelta
 
 
 # Set up logging
@@ -80,10 +83,70 @@ def get_track(track_id: str):
     return get_track_info(track_id)
 
 
+# Rate limiting dictionary
+class RateLimiter:
+    def __init__(self, max_requests: int, time_window: timedelta):
+        self.max_requests = max_requests
+        self.time_window = time_window
+        self.requests: Dict[str, list] = defaultdict(list)
+    
+    def _cleanup_old_requests(self, user_ip: str) -> None:
+        """Remove requests that are outside the time window."""
+        current_time = time.time()
+        self.requests[user_ip] = [
+            timestamp for timestamp in self.requests[user_ip]
+            if current_time - timestamp < self.time_window.total_seconds()
+        ]
+    
+    def is_rate_limited(self, user_ip: str) -> bool:
+        """Check if the user has exceeded their rate limit."""
+        self._cleanup_old_requests(user_ip)
+        
+        # Get current count after cleanup
+        current_count = len(self.requests[user_ip])
+        
+        # Add current request timestamp (incrementing the count)
+        current_time = time.time()
+        self.requests[user_ip].append(current_time)
+        
+        # Check if user has exceeded the maximum requests
+        return (current_count + 1) > self.max_requests
+    
+    def get_current_count(self, user_ip: str) -> int:
+        """Get the current request count for an IP."""
+        self._cleanup_old_requests(user_ip)
+        return len(self.requests[user_ip])
+
+
+# Initialize rate limiter with 25 requests per day
+rate_limiter = RateLimiter(
+    max_requests=25,
+    time_window=timedelta(days=1)
+)
+
+def get_user_ip(request: Request) -> str:
+    """Helper function to get user's IP address."""
+    forwarded = request.headers.get("X-Forwarded-For")
+    if forwarded:
+        return forwarded.split(",")[0]
+    return request.client.host
+
+
 # Download a track and return a download URL
 @app.post("/download/track")
 def download_track(request: DownloadRequest):
     try:
+        user_ip = get_user_ip(request)
+    
+        if rate_limiter.is_rate_limited(user_ip):
+            current_count = rate_limiter.get_current_count(user_ip)
+            raise HTTPException(
+                status_code=429,
+                detail={
+                    "detail": "You have exceeded the maximum number of requests per day. Please try again tomorrow.",
+                    "help": "https://t.me/chrunoss"
+                }
+            )
         if request.arl is None or request.arl.strip() == "":
             ARL = ARL_TOKEN
         else: